Free Access to Fortinet.FCSS_LED_AR-7.6.v2026-08-19.q93 with Valid Practice Test (Page 9)

Question 36

Refer to the exhibit.

You've configured the FortiLink interface, and the DHCP server is enabled by default. The resulting DHCP server settings are shown in the exhibit.
What is the role of the vci-string setting in this configuration?

A.To restrict the IP address assignment to devices that have FortiSwitch or FortiExtender as their hostname.
B.To reserve IP addresses for FortiSwitch and FortiExtender devices.
C.To ignore DHCP requests coming from FortiSwitch and FortiExtender devices.
D.To connect, devices must match the VCI string; otherwise, they will not receive an IP address.

Question 37

Which three configuration steps are needed to onboard a FortiExtender to FortiGate?
(Choose three)
Response:

A.Authorize FortiExtender on FortiGate
B.Add FortiExtender to trusted device list
C.Assign interface role to FortiExtender port
D.Set modem mode to passthrough

Question 38

A network administrator is deploying a new FortiGate firewall and wants to enable zero-touch provisioning with FortiManager. The administrator has not manually configured the FortiManager IP address or FQDN on FortiGate. However, FortiGate can still discover FortiManager automatically.
In this situation, where can FortiGate learn the FortiManager IP address or FQDN for zero-touch provisioning?

A.By retrieving options 240 or 241 from a DHCP server
B.By querying the local ARP table for the FortiManager IP address.
C.By the default static route configuration on FortiGate.
D.By checking the FortiGate factory default configuration.

Question 39

Refer to the exhibits.

The exhibits show the VAP configuration. Wi-Fi SSIDs. and zone table.
Which two statements describe how FortiGate handles VLAN assignment for wireless clients? (Choose two.)

A.FortiGate will load balance clients using VLAN 101 and VLAN 102 and assign them an IP address from the 10.0.3.0/24 subnet.
B.All clients connecting to the Corp Zone will receive an IP address from the 10.0.20.0/24 subnet.
C.Clients connecting to APs in the Floor 1 group will not be able to receive an IP address.
D.Clients connecting to APs in the Office group will be assigned to VLAN 102.

Correct Answer: C,D

Analysis of the VAP Configuration (Image 1): The VAP named " Corporate " has set vlan-pooling wtp-group, which maps directly to the Managed AP Group VLAN pooling method. The study guide states: " The Managed AP Group load balance method assigns VLANs from pools based on AP location. " This means VLAN assignment is NOT load-balanced (no round-robin or hash) - instead, it is determined by which WTP (Wireless Termination Point) group the AP physically belongs to:
* APs in wtp-group " Floor_1 " # assigned VLAN 101 (Corp.101)
* APs in wtp-group " Office " # assigned VLAN 102 (Corp.102)
Why C is CORRECT: From Image 2, the interface Corp.101 (VLAN 101 - assigned to the Floor_1 AP group) shows an IP address of 0.0.0.0/0.0.0.0, meaning no IP address or DHCP server is configured on that interface. Therefore, clients connecting to APs in the Floor_1 group will be placed on VLAN 101 but will not be able to obtain an IP address - confirming option C.
Why D is CORRECT: The VAP configuration explicitly maps wtp-group " Office " to VLAN 102. The study guide confirms that with the Managed AP Group method, VLANs are assigned based on AP group membership. APs belonging to the " Office " group will have all their clients assigned to VLAN 102 (Corp.
102), which has a configured IP of 10.0.20.1/255.255.255.0 - confirming option D.
Why the other options are wrong:
* A is incorrect - The wtp-group pooling method does not load balance; it assigns VLANs based on AP group location. Round-robin or hash would be needed for load balancing. Additionally, the subnet
10.0.3.0/24 does not exist anywhere in either exhibit.
* B is incorrect - Corp.zone contains both Corp.101 and Corp.102. Since Corp.101 has no IP configured (0.0.0.0/0.0.0.0), clients on Floor_1 APs (VLAN 101) will not receive any IP address, let alone one from the 10.0.20.0/24 subnet. Only Corp.102 clients (Office group) receive addresses from 10.0.20.0/24.

Question 40

Refer to the exhibits which show the FortiSwitch and FortiGate interface configurations.
FortiSwitch VLAN configuration

Port2 interface configuration

Which two statements describe how port2 handles tagged and untagged traffic? (Choose two.) Response:

A.Port2 assigns ingress untagged traffic to VLAN 100.
B.Port2 tags egress traffic for VLAN 100.
C.Port2 accepts ingress untagged traffic for VLAN IDs 100, 4091, and 4093 only.
D.Port2 accepts ingress tagged traffic for VLAN IDs 4091 and 4093 only.

Question 36

Question 37

Question 38

Question 39

Question 40

Download PDF File