Some system daemons, such as NTP and FortiGuard updates, generate traffic coming from FortiGate. All the VDOMs on a FortiGate device have assigned the role of the management VDOM. Traffic coming from FortiGate to those global services originates from the management VDOM. By default, the VDOM root acts as the management VDOM, but you can manually reassign this task to a different VDOM.
What traffic is always generated from the management VDOM?
a. Link Health Monitor
b. FortiGuard
Which of the following statements about the management VDOM is true?
a. It is root by default and cannot be changed.
b. It is root by default, but can be changed to any VDOM.
VDOM
Virtual Domain
Virtual Direct Main
Which type of administrator can make changes to all VDOMS?
a. A customer VDOM administrator
b. An administrator with the super_admin profile
Which of the following statements about VDOM administrators is true?
a. There can be only one administrator per VDOM.
b. Each VDOM can have multiple administrators.
Afiect all configured VDOMs: (Select 5)
Hostname
HA settings
FortiGuard settings
System time
Administrative accounts
IP Interface
Fortiguard account
Unit serial number
Configured separately, in each VDOM: (Select 5)
Operating mode (transparent, NAT/route)
Inspection mode (flow—based, proxy—based)
Routes and network interfaces
Firewall policies
Security profiles
VPN
Which of the following configuration settings are global settings?
a. Firewall policies
b. FortiGuard settings
Which of the following configuration settings are per VDOM settings?
a. Host name
b. Inspection mode
Complete:
Note that similar to using inter—VLAN routing, Layer 3 must be involved-you cannot create an inter—VDOM link between Layer 2 transparent mode VDOMs.
At least one of the VDOMs must be operating in NAT mode. This, among other benefits, prevents potential Layer 2 loops.
At least one of the VDOMs must be operating in transparent mode. This, among other benefits, prevents potential Layer 2 loops.
For a FortiGate device with two NP4 or NP6 processors, there are two accelerated inter—VDOM links, each with two interfaces:
-npu0_vlink: npu0_vlink0 npu0_vlink1
-npu1_vlink: npu1_vlink0 npu1_vlink1
asic0_vlink: npu0_vlink0 npu0_vlink1 asic1_vlink: npu1_vlink0 npu1_vlink1
Which is a requirement for creating an inter—VDOM link between two VDOMs?
a. The inspection mode of at least one VDOM must be proxy based.
b. At least one of the VDOMs must be operating in NAT mode.
Which type of VDOM link requires that both sides of the link be in the same IP subnet?
a. NAT—to—transparent
b. NAT-to-NAT
Of these options, which one is a possible reason why an administrator might not be able to gain access to a specific VDOM?
a. The administrator is using an IP address not specified as a trusted host.
b. The administrat0r is using the Super_Admin profile.
Which troubleshooting tool is best suited when trying to verify the firewall policy used by an inter-VDOM link?
a. Sniffer trace
b. Packet flow trace
