NSE7 Advanced Networking and SD-WAN Practice Question
An administrator needs to integrate a FortiSwitch with a FortiGate for LAN edge management. The FortiGate will manage the switch via the LAN interface. Which TWO steps are required? (Choose two.)
⚠ Common exam trap
Test-takers frequently think they need to manually assign a management IP or disable STP, but FortiLink automates these functions, making manual configuration unnecessary and even disruptive.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable switch controller on the FortiGate.
Enabling the switch controller on the FortiGate activates the FortiLink management protocol, which is required for the FortiGate to discover, configure, and manage the FortiSwitch as a managed switch. Option E is correct because the physical port connecting the FortiSwitch must be configured as a 'switch' interface type (FortiLink interface) to establish the proprietary control and data plane communication between the devices.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Enable switch controller on the FortiGate.
Why this is correct
The switch controller feature must be enabled to manage FortiSwitch devices.
- ✗
Assign an IP address to the FortiSwitch's management VLAN on the FortiGate.
Why it's wrong here
The FortiGate automatically assigns IP via DHCP; manual IP assignment is not required.
- ✗
Configure the FortiSwitch in standalone mode.
Why it's wrong here
For FortiGate management, the switch should be in managed mode, not standalone.
- ✗
Disable STP on the FortiSwitch ports connected to the FortiGate.
Why it's wrong here
STP should be enabled for loop prevention; disabling it may cause issues.
- ✓
Connect the FortiSwitch to a port configured as a 'switch' interface type.
Why this is correct
The FortiSwitch must be connected to a FortiGate port that is set as a switch port (or trunk) to allow management.
Go deeper
Related to this question
About these practice questions
One of 940 original NSE7 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.