View all questions & answers for the NSE 7 - Enterprise Firewall 7.6 Administrator Exam Materials exam

NSE 7 - Enterprise Firewall 7.6 Administrator Exam Materials - Question #20 Discussion

Comment Image Comment Image Comment Image

In a transparent VDOM interface, what does the command set forward-domain do? (Choose one answer)

  • A. It allows the interface to access the configured admin domain.
  • B. It restricts the interface to managing traffic from only the specified VLAN, effectively segregating network traffic.
  • C. It isolates traffic within a specific VLAN by assigning a broadcast domain to an interface based on the VLAN ID
  • D. It assigns a unique domain ID to the interface, allowing it to operate across multiple VLANs within the same VDOM.
Correct Answer: C

Brave-Dump Community Votes

Answer: C (7 votes) 77.78%
Answer: D (2 votes) 22.22%

Community Explanations & Comments (9)

Hasan Ahmed 11 months ago
Selected: C
correct answer is C
Shabeeb Kunhipocker 11 months ago
Selected: D
I think it is D, since it allows clients in different vlans to communicate as long as the Fortigate L2 interfaces for these VLANs are in the same forward domain.
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Forwarding-domain-in-transparent-mode/ta-p/240805
Shabeeb Kunhipocker 11 months ago
Selected: C
Referring deeper I think it is C. D never talks about restricting broadcast domain which is the primary purpose of forward domain.
Anonymous User 10 months ago
Selected: D
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Forwarding-domain-in-transparent-mode/ta-p/240805
thaer saadi 10 months ago
Selected: C
C is correct
Adam 9 months ago
Selected: C
From Study Guide:
config system interface
edit <interface>
set forward-domain <domain_ID>
end
---
Forward-domains are broadcast domains
---
All interfaces in a transparent VDOM share the same broadcast domain. If your configuration includes more than two VLAN IDs, you should use the forward-domain command, as shown on the slide, to subdivide a VDOM into multiple broadcast domains using the VLAN ID as the domain ID for easy recognition.

A is wrong because forward-domain is not related to admin domain (ADOM on FortiManager), but about virtual domain (VDOM on FortiGate).
B is wrong because forward-domain is not related to management of FortiGate from specific VLAN
D is wrong because assigning the domain ID to an interface won't make that one interface operate "across multiple VLANs"
C is correct as it matches recommendation of assigning forward-domain to be same as VLAN ID, so each interface or group of interfaces will be in separate VLAN
Mattia Bruno 7 months ago
Selected: C
C Is correct
zineeddine Mohamed 7 months ago
Selected: C
C is correct
Anonymous User 6 months ago
Selected: C
Enterprise_Firewall_7.6_Administrator_Study_Guide Page 76