nerdexam
Fortinet

NSE4 · Question #405

A FortiGate device is configured with two VDOMs. The management VDOM is 'root' , and is configured in transparent mode,'vdom1' is configured as NAT/route mode. Which traffic is generated only by…

The correct answer is A. SNMP traps B. FortiGaurd D. NTP. Management-plane services like SNMP traps, FortiGuard queries, and NTP synchronization are typically handled and sourced by the root VDOM, especially when it is configured in transparent mode for central administration.

Submitted by akirajp· Apr 18, 2026FortiGate Deployment and System Configuration

Question

A FortiGate device is configured with two VDOMs. The management VDOM is 'root' , and is configured in transparent mode,'vdom1' is configured as NAT/route mode. Which traffic is generated only by 'root' and not 'vdom1'? (Choose three.)

Options

  • ASNMP traps
  • BFortiGaurd
  • CARP
  • DNTP
  • EICMP redirect

How the community answered

(31 responses)
  • A
    74% (23)
  • C
    16% (5)
  • E
    10% (3)

Why each option

Management-plane services like SNMP traps, FortiGuard queries, and NTP synchronization are typically handled and sourced by the root VDOM, especially when it is configured in transparent mode for central administration.

ASNMP trapsCorrect

SNMP traps are management plane functions, which are typically initiated and handled by the root VDOM, particularly when it serves as the central management point for the FortiGate device.

BFortiGaurdCorrect

FortiGuard updates and queries are system-wide management plane services, usually sourced from the root VDOM for all FortiGate services, rather than independently by transparent VDOMs.

CARP

ARP (Address Resolution Protocol) is a Layer 2 protocol that both transparent and NAT/route mode VDOMs will generate on their respective interfaces to resolve MAC addresses for directly connected devices.

DNTPCorrect

NTP synchronization is a device-wide timekeeping function centrally managed by the root VDOM to maintain accurate system time, rather than being an independent client function of a transparent VDOM.

EICMP redirect

ICMP redirect messages are generated by Layer 3 routers; a transparent mode VDOM, functioning as a Layer 2 bridge, does not generate ICMP redirects, while a NAT/route VDOM could.

Concept tested: FortiGate VDOM modes and service origination

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/52678/virtual-domains

Topics

#VDOM modes#Management VDOM#FortiGate services#Device-level functions

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice