nerdexam
Fortinet

NSE4 · Question #394

A FortiGate devices is configured with four VDOMs: 'root' and 'vdom1' are in NAT/route mode; 'vdom2' and 'vdom2' are in transparent mode. The management VDOM is 'root'. Which of the following…

The correct answer is A. An inter-VDOM link between 'root' and 'vdom1' can be created. B. An inter-VDOM link between 'vdom1' and vdom2' can created. Inter-VDOM links on a FortiGate can be established between two NAT/route mode VDOMs or between a NAT/route VDOM and a transparent mode VDOM.

Submitted by hassan_iq· Apr 18, 2026FortiGate Deployment and System Configuration

Question

A FortiGate devices is configured with four VDOMs: 'root' and 'vdom1' are in NAT/route mode; 'vdom2' and 'vdom2' are in transparent mode. The management VDOM is 'root'. Which of the following statements are true? (Choose two.)

Options

  • AAn inter-VDOM link between 'root' and 'vdom1' can be created.
  • BAn inter-VDOM link between 'vdom1' and vdom2' can created.
  • CAn inter-VDOM link between 'vdom2' and vdom3' can created.
  • DInter-VDOM link links must be manually configured for FortiGuard traffic.

How the community answered

(21 responses)
  • A
    86% (18)
  • C
    10% (2)
  • D
    5% (1)

Why each option

Inter-VDOM links on a FortiGate can be established between two NAT/route mode VDOMs or between a NAT/route VDOM and a transparent mode VDOM.

AAn inter-VDOM link between 'root' and 'vdom1' can be created.Correct

An inter-VDOM link can be created between root (NAT/route mode) and vdom1 (NAT/route mode) because it is permissible to link two VDOMs operating in the same NAT/route mode.

BAn inter-VDOM link between 'vdom1' and vdom2' can created.Correct

An inter-VDOM link can be established between vdom1 (NAT/route mode) and vdom2 (transparent mode) as FortiGate supports inter-VDOM communication between a NAT/route VDOM and a transparent VDOM.

CAn inter-VDOM link between 'vdom2' and vdom3' can created.

An inter-VDOM link cannot be created directly between vdom2 and vdom3 if both are in transparent mode, as inter-VDOM links are Layer 3 constructs and are not supported between two Layer 2 transparent VDOMs.

DInter-VDOM link links must be manually configured for FortiGuard traffic.

FortiGuard traffic and updates are handled by the FortiGate device itself, typically originating from the management VDOM and using its routing, without requiring specific manual configuration of inter-VDOM links for this service traffic.

Concept tested: FortiGate Inter-VDOM link compatibility

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/862608/what-is-a-vdom

Topics

#VDOMs#Inter-VDOM Links#FortiGate Configuration#Network Modes

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice