Courseiva
Enterprise Firewall and VDOMshardMultiple ChoiceObjective-mapped

NSE7 Enterprise Firewall and VDOMs Practice Question

In a FortiManager deployment with global ADOM enabled, an administrator creates a firewall policy in the global ADOM. What is the effect of this policy on the per-ADOM devices?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The policy is installed as a header policy on all managed FortiGates

In FortiManager with global ADOM enabled, policies created in the global ADOM are installed as header policies on all managed FortiGates across all ADOMs. These header policies are processed first, before any per-ADOM policies. They apply to all devices unless overridden by per-ADOM policies with higher priority. Therefore, option D is correct.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The policy is used only if no per-ADOM policy exists with the same name

    Why it's wrong here

    Global policies are additive.

  • The policy is applied only to devices in the same ADOM as the global ADOM

    Why it's wrong here

    Global ADOM affects all ADOMs.

  • The policy is ignored unless explicitly assigned to each ADOM

    Why it's wrong here

    It is automatically assigned.

  • The policy is installed as a header policy on all managed FortiGates

    Why this is correct

    Global policies are typically inserted as header policies in each device's policy list.

About these practice questions

This NSE7 question is part of Courseiva's 940-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.