nerdexam
Fortinet

NSE4 · Question #227

Which of the following statements are TRUE for Port Pairing and Forwarding Domains? (Select all that apply.)

The correct answer is A. They both create separate broadcast domains. D. They may contain physical and/or virtual interfaces. Both Port Pairing and Forwarding Domains isolate network traffic by creating separate broadcast domains, and they can both be configured with a mix of physical and virtual interfaces.

Submitted by kev92· Apr 18, 2026FortiGate Deployment and System Configuration

Question

Which of the following statements are TRUE for Port Pairing and Forwarding Domains? (Select all that apply.)

Options

  • AThey both create separate broadcast domains.
  • BPort Pairing works only for physical interfaces.
  • CForwarding Domains only apply to virtual interfaces.
  • DThey may contain physical and/or virtual interfaces.
  • EThey are only available in high-end models.

How the community answered

(32 responses)
  • A
    94% (30)
  • B
    3% (1)
  • C
    3% (1)

Why each option

Both Port Pairing and Forwarding Domains isolate network traffic by creating separate broadcast domains, and they can both be configured with a mix of physical and virtual interfaces.

AThey both create separate broadcast domains.Correct

Both Port Pairing and Forwarding Domains are features designed to segment network traffic, preventing broadcasts and other layer 2 traffic from crossing between the configured groups of interfaces, thereby effectively creating separate broadcast domains.

BPort Pairing works only for physical interfaces.

Port Pairing is not limited to physical interfaces; it can also be configured with virtual interfaces like VLAN subinterfaces.

CForwarding Domains only apply to virtual interfaces.

Forwarding Domains apply to both physical and virtual interfaces, providing comprehensive isolation capabilities across different interface types.

DThey may contain physical and/or virtual interfaces.Correct

These features offer flexibility by allowing administrators to include both physical interfaces (e.g., hardware ports) and virtual interfaces (e.g., VLAN subinterfaces, aggregate interfaces) within their respective groups to achieve granular network segmentation.

EThey are only available in high-end models.

Port Pairing and Forwarding Domains are common FortiGate features available across a broad range of models that support VDOMs and advanced networking, not exclusively high-end devices.

Concept tested: Port Pairing and Forwarding Domain functionality

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/86958/forwarding-domains

Topics

#Port Pairing#Forwarding Domains#Network Segmentation#Interface Configuration

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice