NSE4_FGT-7.0 · Question #26
Refer to the exhibit. The Root and To_Internet VDOMs are configured in NAT mode. The DMZ and Local VDOMs are configured in transparent mode. The Root VDOM is the management VDOM. The To_Internet…
The correct answer is A. Inter-VDOM links are required to allow traffic between the Local and Root VDOMs. B. A static route is required on the To_Internet VDOM to allow LAN users to access the internet. In a FortiGate multi-VDOM setup, inter-VDOM links are essential for routing traffic between VDOMs of differing modes, and VDOMs providing internet access require a static default route.
Question
Refer to the exhibit. The Root and To_Internet VDOMs are configured in NAT mode. The DMZ and Local VDOMs are configured in transparent mode. The Root VDOM is the management VDOM. The To_Internet VDOM allows LAN users to access internet. TheTo_lnternet VDOM is the only VDOM with internet access and is directly connected to ISP modem. Which two statements are true? (Choose two.)
Exhibit
Options
- AInter-VDOM links are required to allow traffic between the Local and Root VDOMs.
- BA static route is required on the To_Internet VDOM to allow LAN users to access the internet.
- CInter-VDOM links are required to allow traffic between the Local and DMZ VDOMs.
- DInter-VDOM links are not required between the Root and To_Internet VDOMs because the Root
How the community answered
(52 responses)- A54% (28)
- C29% (15)
- D17% (9)
Why each option
In a FortiGate multi-VDOM setup, inter-VDOM links are essential for routing traffic between VDOMs of differing modes, and VDOMs providing internet access require a static default route.
Traffic flowing between distinct VDOMs, especially when they operate in different modes (transparent vs. NAT), always requires inter-VDOM links to establish a Layer 3 routing path and allow communication.
For the To_Internet VDOM to successfully forward LAN user traffic to the internet through the ISP modem, a static default route (0.0.0.0/0) must be configured on that VDOM, pointing to the ISP's gateway.
While inter-VDOM links enable routing between distinct VDOMs, two transparent VDOMs might communicate via a central routing VDOM (like Root) that interconnects their respective Layer 2 segments, rather than directly via a dedicated inter-VDOM link between themselves.
Root and To_Internet are distinct VDOMs, both in NAT mode, and require inter-VDOM links to route traffic between their respective networks, making the statement that they are not required incorrect.
Concept tested: FortiGate VDOM modes and inter-VDOM routing
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/337190/inter-vdom-links
Topics
Community Discussion
No community discussion yet for this question.