NSE7 Enterprise Firewall and VDOMs Practice Question
An organization wants to use FortiManager to manage multiple FortiGate devices. The administrator needs to ensure that each device group has separate policy and object configurations. Which FortiManager feature should be configured?
⚠ Common exam trap
Watch out — candidates often confuse ADOMs with VDOMs or think that header/footer policies can achieve configuration separation, but ADOMs are the only FortiManager feature that provides full administrative and configuration isolation between device groups.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Administrative Domains (ADOMs)
Administrative Domains (ADOMs) in FortiManager allow you to partition the management database so that each ADOM has its own independent set of policy packages and objects. By assigning each device group to a separate ADOM, administrators ensure that policy and object configurations are isolated and cannot be shared or accidentally overwritten between groups. This directly meets the requirement for separate configurations per device group.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Policy packages with header/footer policies
Why it's wrong here
Header/footer policies are for reusability within an ADOM, not for separation between groups.
- ✓
Administrative Domains (ADOMs)
Why this is correct
ADOMs provide the required separation of configurations for different device groups.
- ✗
Global ADOM
Why it's wrong here
Global ADOM is for global objects shared across ADOMs, not for separation.
- ✗
Meta fields
Why it's wrong here
Meta fields are for adding metadata to objects, not for separating device groups.
Go deeper
Related to this question
About these practice questions
This NSE7 question is part of Courseiva's 940-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.