NSE4 · Question #405
A FortiGate device is configured with two VDOMs. The management VDOM is 'root' , and is configured in transparent mode,'vdom1' is configured as NAT/route mode. Which traffic is generated only by…
The correct answer is A. SNMP traps B. FortiGaurd D. NTP. Management-plane services like SNMP traps, FortiGuard queries, and NTP synchronization are typically handled and sourced by the root VDOM, especially when it is configured in transparent mode for central administration.
Question
A FortiGate device is configured with two VDOMs. The management VDOM is 'root' , and is configured in transparent mode,'vdom1' is configured as NAT/route mode. Which traffic is generated only by 'root' and not 'vdom1'? (Choose three.)
Options
- ASNMP traps
- BFortiGaurd
- CARP
- DNTP
- EICMP redirect
How the community answered
(31 responses)- A74% (23)
- C16% (5)
- E10% (3)
Why each option
Management-plane services like SNMP traps, FortiGuard queries, and NTP synchronization are typically handled and sourced by the root VDOM, especially when it is configured in transparent mode for central administration.
SNMP traps are management plane functions, which are typically initiated and handled by the root VDOM, particularly when it serves as the central management point for the FortiGate device.
FortiGuard updates and queries are system-wide management plane services, usually sourced from the root VDOM for all FortiGate services, rather than independently by transparent VDOMs.
ARP (Address Resolution Protocol) is a Layer 2 protocol that both transparent and NAT/route mode VDOMs will generate on their respective interfaces to resolve MAC addresses for directly connected devices.
NTP synchronization is a device-wide timekeeping function centrally managed by the root VDOM to maintain accurate system time, rather than being an independent client function of a transparent VDOM.
ICMP redirect messages are generated by Layer 3 routers; a transparent mode VDOM, functioning as a Layer 2 bridge, does not generate ICMP redirects, while a NAT/route VDOM could.
Concept tested: FortiGate VDOM modes and service origination
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/52678/virtual-domains
Topics
Community Discussion
No community discussion yet for this question.