Exam FCP_FGT_AD-7.4 topic 1 question 29 discussion

If the interface is set on WAN (for example), DHCP Server is not enabled

The 'DHCP server' option cannot be enabled/used on DMZ interfaces. For the interfaces with DMZ role, DHCP server and Security mode are not available (by design). If a DHCP server is required on that physical interface, change its role from DMZ to LAN, WAN, or Undefined.

The role of the interface prevents setting a DHCP server

A right one

Answer: A

A is correct.

In this scenario, the issue preventing the administrator from enabling DHCP service on the FortiGate interface is most likely that the interface is configured as part of a zone or is set to use DHCP relay. Here's a breakdown of potential causes: 1. Interface in a Zone: If the interface is part of a zone, you cannot configure individual settings, such as DHCP, directly on the interface. FortiGate restricts interface-specific configurations like DHCP when the interface is assigned to a zone. 2. DHCP Relay Configured: If the interface is already configured to act as a DHCP relay (forwarding DHCP requests to an external DHCP server), FortiGate will not allow you to enable the DHCP server on that interface. Page 8 of Study Guide

if you set the interface role to wan, it will hide useless settings on a wan link (such as DHCP server)

The role that prevent an interface to act like DHCP relay is assigned to DMZ interface. https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-configure-FortiGate-as-DHCP-server/ta-p/197856