NSE7 Advanced Networking and SD-WAN Practice Question
A FortiGate is deployed as a LAN edge switch with multiple FortiSwitch units connected. The administrator wants to configure VLANs and manage the switches centrally. Which TWO features must be enabled on the FortiGate to achieve this? (Select TWO.)
⚠ Common exam trap
Many exam-takers think LLDP-MED or STP must be manually configured for switch management, but FortiLink abstracts these protocols and handles them automatically, making options A and E red herrings.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create VLAN interfaces on the FortiGate and assign them to the FortiLink interface
VLAN interfaces must be created on the FortiGate and assigned to the FortiLink interface to enable centralized VLAN management. The FortiGate acts as the controller, pushing VLAN configurations to connected FortiSwitch units via the FortiLink tunnel, allowing the administrator to manage all VLANs from a single point without logging into each switch individually.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
LLDP-MED
Why it's wrong here
LLDP-MED is for voice VLAN, not central management.
- ✗
Configure a separate management VRF
Why it's wrong here
Management VRF is optional and not required for switch management.
- ✓
Create VLAN interfaces on the FortiGate and assign them to the FortiLink interface
Why this is correct
VLANs are defined on the FortiGate and communicated to switches via FortiLink.
- ✓
FortiLink on the interface connecting to the FortiSwitch
Why this is correct
FortiLink enables management and control of FortiSwitch from FortiGate.
- ✗
STP (Spanning Tree Protocol) on the FortiGate
Why it's wrong here
STP may be used but is not required for management.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every NSE7 question from scratch — 940 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.