NSE7 Advanced Networking and SD-WAN Practice Question
Which feature allows a FortiGate to maintain separate routing tables for different customers or departments on the same device?
⚠ Common exam trap
A common mix-up: candidates confuse VDOMs with VRFs, thinking VDOMs provide routing isolation, but VDOMs primarily isolate administrative domains and firewall policies, while VRFs specifically provide separate routing tables and forwarding instances.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
VRF (Virtual Routing and Forwarding)
VRF (Virtual Routing and Forwarding) allows a FortiGate to maintain separate, isolated routing tables and forwarding instances for different customers or departments on the same physical device. Each VRF has its own routing table, forwarding table, and interfaces, ensuring traffic from one VRF never crosses into another without explicit route leaking. This is the correct feature for multi-tenant or multi-department routing isolation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Route maps
Why it's wrong here
Route maps are used to manipulate routing information, not to create separate routing tables.
- ✗
VDOM
Why it's wrong here
VDOMs provide separate virtual firewalls but each VDOM has its own routing table; however, VRF is specifically for virtual routing instances within a single VDOM or in transparent mode.
- ✓
VRF (Virtual Routing and Forwarding)
Why this is correct
VRF allows multiple independent routing table instances on the same FortiGate.
- ✗
Policy-based routing
Why it's wrong here
PBR is used to override routing decisions per policy, not to maintain separate routing tables.
Go deeper
Related to this question
About these practice questions
Courseiva writes every NSE7 question from scratch — 940 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.