NSE7_EFW Question 60

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose BD2

  B. In a closed network, the management VDOM must be connected to FortiManager acting as a FortiGuard Distribution Server (FDS) for FortiGuard-dependent features like web filtering to work. D. If the root VDOM, which is the management VDOM here, does not have access to a valid public FDN, FortiGuard databases can fail and web filtering can stop working across all VDOMs. Enterprise Firewall 7.6 Administrator Study Guide Page 74 A is wrong because the guide says only the management VDOM needs the required FortiGuard/FDS connectivity. It does not say Core1 and Core2 must also be management VDOMs. C is wrong because the study guide ties the failure to management VDOM connectivity to internet/FDS, not to the presence of a VDOM link between root and the other VDOMs.

• Chose BD4

  Fortimanager can be used as Fortiguard in a private network but Fortimanager need to have internet access. Based on the question, possible answer is B and D. A definetly wrong and C does not make sense.

• Chose BD4

  ✅ B. No FortiManager in closed network ✔️ Correct If environment is: Closed / no internet Then you must: Use FortiManager as FortiGuard proxy If not: ❌ No updates / lookups ❌ Web filtering stops ❌ Why others are wrong ✅ D. Root VDOM has no FNDN access ✔️ Correct If root (management VDOM): Cannot reach internet / FortiGuard 👉 Then: ❌ No category lookups ❌ Web filtering fails C. No VDOM link ❌ Not required for FortiGuard VDOM links are for traffic flow, not updates A. Core VDOMs as management ❌ Only ONE management VDOM exists Traffic VDOMs rely on it