NSE7 Advanced Networking and SD-WAN Practice Question
A FortiGate administrator is integrating a FortiSwitch managed by the FortiGate. They want to configure a VLAN interface on the FortiSwitch for user traffic. Which configuration is required on the FortiGate?
⚠ Common exam trap
It's easy for candidates to confuse creating a VLAN on the FortiGate's own interfaces (using 'config system interface') with configuring a VLAN on a managed FortiSwitch, which requires the switch controller context.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure a VLAN on the FortiSwitch under the switch controller and assign it to a port
When integrating a FortiSwitch managed by a FortiGate, VLANs for user traffic must be created under the switch controller on the FortiGate. This allows the FortiGate to push the VLAN configuration to the FortiSwitch, including assigning the VLAN to a specific port or port group. Option B correctly describes this process, as the switch controller manages the FortiSwitch as an extension of the FortiGate, not as a standalone device.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable DHCP relay on the FortiSwitch VLAN
Why it's wrong here
DHCP relay is optional, not required for VLAN creation.
- ✓
Configure a VLAN on the FortiSwitch under the switch controller and assign it to a port
Why this is correct
Under config switch-controller, you create a VLAN and assign it to switch ports.
- ✗
Use the config system interface to create a VLAN on the FortiGate and tag it on the trunk
Why it's wrong here
This would create a VLAN interface on the FortiGate, not on the FortiSwitch.
- ✗
Create a VLAN subinterface on the FortiGate's port that connects to the FortiSwitch
Why it's wrong here
The VLAN interface should be created on the FortiSwitch via the FortiGate's switch controller, not as a subinterface on the FortiGate port.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 940 original NSE7 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.