What is the Purpose of Header and Footer Policies in a FortiManager Policy Package?
What is the purpose of header and footer policies in a FortiManager policy package?
Quick Answer
The correct answer is that header and footer policies in a FortiManager policy package are designed to apply policies at the top and bottom of the policy list that are not affected by reordering within the package. This is because FortiManager treats these as fixed-position anchors: header policies always remain first in the sequence, and footer policies always remain last, regardless of any drag-and-drop or automated reordering applied to the regular policies in between. On the Fortinet NSE 7 Advanced Security NSE7 exam, this concept tests your understanding of policy package hierarchy and the importance of maintaining a consistent security posture—especially when multiple administrators are managing the same policy package. A common trap is assuming that all policies can be freely reordered, but header and footer policies are deliberately locked to prevent accidental bypass of critical rules like a global deny-all or an explicit allow for management traffic. Remember the mnemonic: "Headers hold the top, footers fix the bottom—reordering can't rob them."
⚠ Common exam trap
Many exam-takers confuse header/footer policies with simple policy ordering or backup mechanisms, failing to recognize that their key purpose is to provide immutable positioning that survives reordering operations within the policy package.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
To apply policies at the top and bottom of the policy list that are not affected by reordering within the package
Header and footer policies in FortiManager policy packages allow administrators to define policies that are automatically placed at the very top (header) and very bottom (footer) of the policy list. These policies remain fixed in position and are not affected by any reordering operations performed on the regular policies within the package, ensuring that critical security controls (e.g., deny-all or allow-specific traffic) are always enforced in the correct order.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
To separate IPv4 and IPv6 policies
Why it's wrong here
IPv4 and IPv6 are in separate policy packages.
- ✓
To apply policies at the top and bottom of the policy list that are not affected by reordering within the package
Why this is correct
Correct.
- ✗
To create backup policies
Why it's wrong here
Incorrect.
- ✗
To define policies that are only used during installation
Why it's wrong here
They are active after installation.
Go deeper
Related to this question
About these practice questions
This NSE7 question is part of Courseiva's 940-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
3 more ways this is tested on NSE7
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. What is the purpose of header and footer policies in a FortiManager policy package?
easy- A.They are used for VDOM-specific policies that cannot be modified
- B.They provide a way to group policies for reporting purposes
- ✓ C.They define policies that are placed at the top (header) and bottom (footer) of the policy list when applied to a FortiGate
- D.They allow policy packages to be installed in a specific sequence
Why C: Header and footer policies in FortiManager policy packages allow administrators to define policies that are automatically placed at the very top (header) and very bottom (footer) of the policy list when the package is installed on a FortiGate. This ensures that critical policies, such as default deny rules or inter-VDOM links, remain in a fixed position regardless of other policy changes. This mechanism is essential for maintaining a consistent security posture across managed FortiGates.
Variation 2. In FortiManager, what is the purpose of header and footer policies in a policy package?
medium- A.To create policy groups for better organization
- B.To apply policies only during specific times of the day
- ✓ C.To ensure specific policies are always placed at the top (header) or bottom (footer) of the policy list
- D.To separate IPv4 and IPv6 policies
Why C: Header and footer policies in FortiManager are special policy types that enforce a fixed position within the policy list. Header policies are always placed at the top (before all other policies), and footer policies are always placed at the bottom (after all other policies). This ensures that critical security rules, such as default-deny or global allow rules, remain in their intended position regardless of policy package changes or reordering operations.
Variation 3. What is the purpose of a header policy in a FortiManager policy package?
easy- A.To apply policies to the management VDOM
- B.To create policies that bypass security profiles
- ✓ C.To define policies that are inserted at the beginning of the policy list
- D.To specify the name of the policy package
Why C: A header policy in a FortiManager policy package is used to define policies that are inserted at the beginning of the policy list, before any other policies. This ensures that certain traffic matching criteria (e.g., from specific sources or to specific destinations) is evaluated first, which is critical for enforcing high-priority rules like allowlisting or blocking specific traffic before more general policies are applied.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.