Free Access to Fortinet.FCSS_LED_AR-7.6.v2026-08-19.q93 with Valid Practice Test (Page 18)

Question 81

APs have been manually configured to connect to FortiGate over an IPsec network, and FortiGate successfully detects and authorizes them. However, the APs remain unmanaged because FortiGate is unable to establish a CAPWAP tunnel with them. What configuration change can resolve this issue and enable FortiGate to establish the CAPWAP tunnel over the IPsec connection?

A.Assign a custom AP profile for the remote APs with the set mpls-connection option enabled.
B.Decrease the CAPWAP tunnel MTU size for APs to prevent fragmentation.
C.Upgrade the FortiAP firmware image to ensure compatibility with the FortiOS version.
D.Configure a static route on FortiGate to reach the APs over the IPsec tunnel.

Question 82

Connectivity tests are being performed on a newly configured VLAN. The VLAN is configured on a FortiSwitch device that is managed by FortiGate. During testing, it is observed that devices within the VLAN can successfully ping FortiGate. and FortiGate can also ping these devices.
Inter-VLAN communication is working as expected. However, devices within the same VLAN are unable to communicate with each other.
What could be causing this issue?

A.Access VLAN is enabled on the VLAN.
B.The FortiSwitch MAC address table is missing entries.
C.The FortiGate ARP table is missing entries.
D.The native VLAN configured on the ports is incorrect.

Question 83

A network administrator connects a new FortiGate to the network, allowing it to automatically discover and register with FortiManager. What occurs after FortiGate retrieves the FortiManager address?

A.FortiGate sends a discovery request to all devices on the local network using UDP port 1068.
B.FortiGate establishes a secure tunnel to FortiManager over TCP port 541.
C.FortiGate configures its interface settings based on a DHCP response from FortiManager.
D.The device needs to be manually authorized on FortiManager.

Question 84

Why is it critical to maintain NTP synchronization between FortiGate and FortiSwitch when FortiLink is configured?

A.To allow FortiSwitch to function in standalone mode if FortiGate becomes unavailable
B.To facilitate synchronization of firmware updates across devices
C.To allow FortiSwitch to communicate with other FortiSwitch devices in the network
D.To ensure accurate time for logs, authentication, and event correlation

Question 85

Refer to the exhibit.

Which shows the WTP profile configuration.
The AP profile is assigned to two FAP-231F APs that are installed in an open plan area.
The first AP has 32 clients associated with the 5 GHz radios and 22 clients associated with the 2.4 GHz radio.
The second AP has 12 clients associated with the 5 GHz radios and 20 clients associated with the 2.4 GHz radio.
A dual-band-capable client enters the area near the first AP and the first AP measures the new client at - 3 3 dBm signal strength. The second AP measures the new client at -43 dBm signal strength.
If the new client attempts to conned to the student 01 wireless network, which AP radio will the client be associated with?

A.The first AP 2.4 GHz interface provides a stronger signal, which clients often prioritize.
B.The first AP 5 GHz interface because it has a stronger signal.
C.The second AP 5 GHz interface has fewer clients, which ensures better performance despite the weaker signal.
D.The second AP 2.4 GHz interface is preferred over 5 GHz for better speed and lower interference.

Correct Answer: B

This question combines two FortiAP behaviors shown in the study guide:
* AP handoff for load balancing
* Frequency handoff for band steering to 5 GHz
From the WTP profile in the exhibit:
* set handoff-rssi 30
* set handoff-sta-thresh 30
The LAN Edge 7.6 Architect study guide explains AP handoff like this:
"If the number of clients is already at the defined threshold, new clients will be redirected to join the least busy nearby AP." It also states: "The handoff-sta-thresh parameter defines the threshold value that triggers the handoff protocol for new clients." So, because the first AP 5 GHz radio already has 32 clients, it is above the threshold of 30, meaning AP handoff can be considered.
However, the same extract adds an important condition:
"The handoff-rssi threshold defined in the AP profile applies when a handed-off client tries to connect to the second AP. The client ' s signal strength must be equal to or greater than the defined RSSI value on the new AP." The second AP measures the client at -43 dBm. Based on the configured handoff RSSI threshold of 30, the second AP does not satisfy the required signal condition for the handoff target, so FortiGate does not redirect the client there.
Now consider band selection. The study guide explains frequency handoff:
"Frequency handoff is a band steering technique that FortiGate uses to encourage clients to use the 5 GHz frequency instead of the 2.4 GHz." It also says:
"When a client tries to connect, FortiGate checks whether it can support 5 GHz and, if so, how good the signals are. If a client supports the 5 GHz frequency and the signal is strong enough to connect, FortiGate ignores the client's requests to join the network on 2.4 GHz until the request times out. The client will then automatically try to join the same network using 5 GHz." Because the client is dual-band capable and the first AP sees it at a very strong -33 dBm, FortiGate will steer it to 5 GHz on the first AP.
Why the other options are incorrect:
A). Incorrect. The study guide says frequency handoff encourages dual-band clients to use 5 GHz instead of
2.4 GHz when the 5 GHz signal is strong enough
C). Incorrect. Even though the second AP 5 GHz radio has fewer clients, AP handoff only occurs if the target AP meets the configured handoff RSSI requirement. The study guide explicitly makes that a condition D). Incorrect. 2.4 GHz is not preferred here. The study guide specifically says FortiGate uses frequency handoff to encourage 5 GHz for dual-band-capable clients Final verified conclusion:
The client will associate with the first AP 5 GHz radio because:
* the client is dual-band capable
* FortiGate prefers 5 GHz through frequency handoff
* the first AP has the stronger signal at -33 dBm
* the second AP does not qualify as the handoff target under the configured handoff RSSI condition

Question 81

Question 82

Question 83

Question 84

Question 85

Download PDF File