Fortinet NSE 6 - LAN Edge 7.6 Architect FCSS_LED_AR-7.6 Exam Questions with Experts Answers Updated Recently

The VAP configuration clearly showsVLAN pooling using WTP-groups:

set vlan-pooling wtp-group

config vlan-pool

edit 101

set wtp-group "Floor_1"

edit 102

set wtp-group "Office"

How VLAN assignment works in this mode

VLAN-pooling with wtp-group modemeans:

Each AP group (WTP group) is tied to exactly one VLAN in the pool.

The FortiGate doesnot load balanceVLANs.

Instead, VLANs are mappedper AP group, not per client.

Now verify each answer option:

A. FortiGate will load balance clients using VLAN 101 and 102...

❌Incorrect.

FortiGatedoes NOT load-balance clientswhen vlan-pooling is set towtp-group.

Each AP group receivesonly the VLAN mapped to it.

B. All clients in the Corp zone get IPs from 10.0.20.0/24

❌Incorrect.

In the Wi-Fi zone table, onlyCorp.102has an IP subnet:

Corp.101 →0.0.0.0/0.0.0.0(no IP assigned → clients get no DHCP)

Corp.102 →10.0.20.1/255.255.255.0

Thus, clients associated to VLAN 101cannotget IPs.

C. Clients connecting to APs in the Floor_1 group cannot receive an IP address

✔Correct.

Reason:

Floor_1 WTP-group → VLAN101

VLAN 101 hasno IPin the Wi-Fi table →0.0.0.0/0.0.0.0

No DHCP =Clients receive no IP address

D. Clients connecting to APs in the Office group will be assigned to VLAN 102

✔Correct.

Reason:

Office WTP-group maps to VLAN102

VLAN 102 has subnet10.0.20.0/24

So Office group clients get an IP in that range

Let’s verify each protocol:

C. FortiGate uses the FortiLink protocol to establish communication with FortiSwitch.✔

FortiLink is themanagement and control protocol, encapsulated over:

LLDPfor discovery

CAPWAP (UDP/5246–5247)for control channel

DHB (Device Handshake Bus)inside CAPWAP frames

Thus,FortiLink is required.

D. CAPWAP is used to establish the control channel between FortiSwitch and FortiGate.✔

Although CAPWAP is commonly associated with FortiAP, FortiSwitchalso uses CAPWAPinternally when managed by FortiGate.

This is documented in:

FortiSwitch Administration Guide

LAN Edge deployment guide

SoD is correct.

B. UHTTPS is used by FortiGate to securely manage and configure FortiSwitch devices.✔

FortiLink session actually uses:

Encrypted CAPWAP (over DTLS)

UHTTPS (port 4433)for secure configuration exchanges

This protocol is mandatory for:

Switch configuration synchronization

Firmware upgrade

NAC data exchange

VLAN provisioning

ThereforeUHTTPS is indeed one of the key protocols.

Why the incorrect options are wrong:

A. SNMP can be used by FortiGate to manage FortiSwitch.✖

FortiGate doesnotuse SNMP to manage FortiSwitch.

SNMP is for monitoring by external systems, not for FortiLink control.

E. IGMP is required for management.✖

IGMP is a multicast protocol, irrelevant for FortiGate–FortiSwitch management.