NSE7 Advanced Networking and SD-WAN Practice Question
Which FortiGate feature allows the creation of multiple virtual routing tables within a single VDOM?
⚠ Common exam trap
A common mix-up: candidates confuse VDOM with VRF: candidates often think VDOMs are the only way to create multiple routing tables, but VRF achieves this within a single VDOM, which is a more granular and resource-efficient approach for network segmentation.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
VRF
VRF (Virtual Routing and Forwarding) allows a single FortiGate VDOM to maintain multiple independent routing tables, each with its own forwarding decisions. This is achieved by creating separate VRF instances (identified by VRF IDs 1-255) within the same VDOM, enabling traffic isolation and overlapping IP address spaces without requiring separate VDOMs.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
VRF
Why this is correct
VRF (virtual routing and forwarding) instantiates independent routing tables inside one VDOM, each with its own interfaces, routes and forwarding decisions. This separation satisfies the requirement for multiple virtual routing tables within a single VDOM without deploying additional VDOMs.
- ✗
Policy-based routing
Why it's wrong here
Policy-based routing selects a next hop or interface based on matching criteria for specific traffic, but it still consults the VDOM's single routing table. It is tempting because PBR appears to separate traffic paths, yet it does not instantiate additional routing tables; that requires VRF configuration within the VDOM.
- ✗
VDOM
Why it's wrong here
A VDOM partitions a FortiGate into independent virtual devices, each with its own routing table, but the question asks for the feature creating multiple routing tables inside one VDOM. It is tempting because VDOMs are the standard FortiGate virtualisation mechanism, yet they operate above the routing-table layer rather than within a single VDOM.
- ✗
ECMP
Why it's wrong here
ECMP balances traffic across multiple equal-cost next hops within one routing table; it does not create separate routing tables. It is tempting because ECMP manipulates how routes are used, yet the feature that instantiates additional routing tables inside a VDOM is VRF, not path selection among existing routes.
Go deeper
Related to this question
About these practice questions
Courseiva writes every NSE7 question from scratch — 718 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.