NSE7 Advanced Networking and SD-WAN Practice Question
Which feature allows a FortiGate to use multiple VRFs to separate routing tables for different customers or departments on the same physical device?
⚠ Common exam trap
Watch out — candidates often confuse VDOMs with VRFs, but VDOMs virtualize the entire device (including management and security policies), whereas VRFs specifically virtualize only the routing table, making VRF the correct answer for routing-table separation alone.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
VRF
C is correct because VRF (Virtual Routing and Forwarding) is the native feature that allows a FortiGate to maintain multiple independent routing tables within a single physical device. Each VRF instance has its own routing table, forwarding table, and interface associations, enabling traffic separation for different customers or departments without requiring separate hardware. This is distinct from VDOMs, which provide full virtualized security and management contexts, and from SD-WAN or policy-based routing, which do not create separate routing tables.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
SD-WAN
Why it's wrong here
SD-WAN provides intelligent path selection, not routing table separation.
- ✗
VDOM
Why it's wrong here
VDOM provides security domain separation, but VRF is for routing table separation.
- ✓
VRF
Why this is correct
VRF creates separate routing tables.
- ✗
Policy-based routing
Why it's wrong here
PBR directs traffic based on policy, but does not create separate tables.
Go deeper
Related to this question
About these practice questions
Courseiva writes every NSE7 question from scratch — 940 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.