View all questions & answers for the NSE 7 - Enterprise Firewall 7.6 Administrator Exam Materials exam
NSE 7 - Enterprise Firewall 7.6 Administrator Exam Materials - Question #15 Discussion
Community Explanations & Comments (15)
Mostafa Hasanin Abdelhamid
1 year ago
Selected: A, B
I think, it's A, B
Jimiko Allen Dino
11 months ago
Selected: A, B
Since Core1 and Core2 are not designated as management VDOMs, they rely on the root VDOM for connectivity to external resources such as FortiGuard updates. If the root VDOM lacks a VDOM link to these VDOMs or cannot reach FortiGuard services, security features like web filtering will stop working
Hasan Ahmed
11 months ago
Selected: A, B
Yes, A, B is the Correct Answer
Mike
10 months ago
Selected: B, C
study guide page 172
b and c are correct
b: since the root vdom is the Management vdom it needs access to Fortiguard
c: you can configure FortiManager as a FDS so in that case the root vdom would need access to the FortiManager to get updates.
A is wrong since a non-management vdom does not update FortiGuard resources, therefore it does not need internet access or a link to the management vdom
b and c are correct
b: since the root vdom is the Management vdom it needs access to Fortiguard
c: you can configure FortiManager as a FDS so in that case the root vdom would need access to the FortiManager to get updates.
A is wrong since a non-management vdom does not update FortiGuard resources, therefore it does not need internet access or a link to the management vdom
Podb
10 months ago
Selected: B, C
BC correct answer
Anonymous User
10 months ago
Selected: B, C
I think B&C
Anonymous User
9 months ago
Selected: B, C
Page 73. Answer is BC
Adam
9 months ago
Selected: B, C
Page 73 of Study Guide:
If your management VDOM does not have internet access or is not connected to a FortiManager serving as a FortiGuard Distribution Server (FDS) in a closed network, then the firewall and all VDOMs may experience issues with the FortiGuard databases, potentially leading to firewall malfunctions.
Page 74 of Study Guide:
If your VDOM (VDOM1, for instance) lacks internet access, and you need to connect through another firewall VDOM (root) that has internet, an inter-VDOM Link enables VDOM1 to access the internet via the root VDOM.
As the question mentions web filtering stopped working after the maintenance window, so it was working before it, so the VDOM links were already established considering no change in having "root" VDOM as the management VDOM, then answer is B (public FDS) or C (FMG FDS)
If your management VDOM does not have internet access or is not connected to a FortiManager serving as a FortiGuard Distribution Server (FDS) in a closed network, then the firewall and all VDOMs may experience issues with the FortiGuard databases, potentially leading to firewall malfunctions.
Page 74 of Study Guide:
If your VDOM (VDOM1, for instance) lacks internet access, and you need to connect through another firewall VDOM (root) that has internet, an inter-VDOM Link enables VDOM1 to access the internet via the root VDOM.
As the question mentions web filtering stopped working after the maintenance window, so it was working before it, so the VDOM links were already established considering no change in having "root" VDOM as the management VDOM, then answer is B (public FDS) or C (FMG FDS)
Anonymous User
9 months ago
Selected: B, C
If the device is configured to use the public internet, the root VDOM must have a valid path to the public FDN. If this access is lost, filtering stops. If the device is in a closed network (no internet access), it is typically configured to use a local FortiManager as its FDN server. If the root VDOM cannot reach the FortiManager, filtering stops.
Anonymous User
8 months ago
Selected: A, B
why C and D are wrong :
C :Web filtering works perfectly without FortiManager
D :Only ONE management VDOM is allowed
C :Web filtering works perfectly without FortiManager
D :Only ONE management VDOM is allowed
Anonymous User
7 months ago
Selected: B, C
Webfiltering will stop working when the fortigate no longer has access to the fortiguard servers. The fortigates can connect to fortiguard either directly via the internet (option B) or via Fortimanager in a closed network where the fortis don't have direct internet access. (C).
Anonymous User
7 months ago
Selected: B, C
Webfiltering will stop working when the fortigate no longer has access to the fortiguard servers. The fortigates can connect to fortiguard either directly via the internet (option B) or via Fortimanager in a closed network where the fortis don't have direct internet access. (C).
Mohamed Gamal Mahmoud
7 months ago
Selected: B, C
Study Guide P73
zineeddine Mohamed
7 months ago
Selected: B, C
BC are correct
Anonymous User
5 months ago
Selected: B, C
A is incorrect: VDOM links are used to route regular data plane traffic between different VDOMs. They are not required for handling system-level control plane updates like FortiGuard lookups, which inherently use the global management paths.
D is incorrect: A FortiGate unit can only have one VDOM designated as the Management VDOM at any given time. You cannot enable management capabilities on Core1 and Core2 simultaneously to pull updates independently.
D is incorrect: A FortiGate unit can only have one VDOM designated as the Management VDOM at any given time. You cannot enable management capabilities on Core1 and Core2 simultaneously to pull updates independently.
Refer to the exhibit. The VDOM configuration on a FortiGate device is shown. You discover that web filtering stopped working in Core1 and Core2 after a maintenance window. What are two reasons why web filtering stopped working? (Choose two answers)
Brave-Dump Community Votes