NSE 7 – LAN Edge 7.0 — Question 40

An administrator is deploying a new FortiGate device using zero-touch provisioning. Before deployment, the administrator added the FortiGate serial number on FortiManager and configured all the FortiGate settings.

FortiGate has a factory default configuration. However, when the administrator connects FortiGate to the network, FortiManager does not start the installation automatically.

Which two scenarios are likely to cause this issue? (Choose two.)

Answer options

• A. The serial number added on FortiManager does not match the FortiGate serial number.
• B. The DHCP server that serves FortiGate is not configured with options 240 and 241.
• C. The pre-shared key set on FortiManager does not match the one set on FortiGate.
• D. Zero-touch provisioning is disabled on FortiManager.

Correct answer: A, B

Explanation

The correct answers are A and B because if the serial numbers do not match, FortiManager cannot recognize the FortiGate device, preventing installation. Additionally, if the DHCP server is not set up with options 240 and 241, the FortiGate will not receive the necessary information to connect to FortiManager, which is essential for zero-touch provisioning. Options C and D are incorrect because while mismatched pre-shared keys or disabled zero-touch provisioning could cause issues, they are not the primary reasons for the installation failure in this context.