NSE7 Advanced Networking and SD-WAN Practice Question
An administrator deploys a FortiGate in a remote office with a FortiSwitch and FortiAP. The LAN edge management features are used to manage these devices. The FortiGate is configured as a controller. Which three steps are required to manage the FortiAP via the FortiGate? (Choose THREE.)
⚠ Common exam trap
Watch out — candidates often confuse the steps for initial AP discovery and authorization with later configuration tasks like SSID creation or switch-level protocols like LLDP, which are not required for the FortiGate to manage the FortiAP.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure DHCP option 138 or DNS to point FortiAP to FortiGate
FortiAPs use DHCP option 138 or DNS to discover the FortiGate controller. DHCP option 138 provides the IP address of the FortiGate, while DNS resolves a predefined hostname (e.g., 'fortigate' or 'fg') to the controller's IP. Without this discovery mechanism, the FortiAP cannot locate the FortiGate to establish CAPWAP control and data tunnels.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Configure DHCP option 138 or DNS to point FortiAP to FortiGate
Why this is correct
FortiAP discovers the controller via DHCP or DNS.
- ✓
Authorize the FortiAP by serial number on the FortiGate
Why this is correct
Must be added to allow management.
- ✓
Enable CAPWAP on the FortiGate
Why this is correct
Required for FortiAP management.
- ✗
Enable LLDP on the FortiSwitch
Why it's wrong here
LLDP is for switch management, not FortiAP.
- ✗
Configure an SSID under the FortiAP profile
Why it's wrong here
SSID configuration is part of the profile, but not a step for enabling management.
Visual reference
Go deeper
Related to this question
About these practice questions
This NSE7 question is part of Courseiva's 940-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.