Which step can be taken to ensure that only FortiAP devices receive IP addresses from a DHCP server on FortiGate?

Which CLI command should an administrator use to view the certificate validation process in real-time?

A wireless network in a school provides guest accessusing a captive portal to allow unregistered users to self-register and access the network. The administrator is requested to update the existing configuration to provide captive portal authentication through a secure connection (HTTPS) to protect and encrypt guest user credentials after they receive the login information when registered for the first time.
Which two changes must the administrator make to enforce HTTPS authentication? (Choose two.)

An administrator is deploying APs that are connecting over an IPsec network. All APs have been configured to connect to FortiGate manually. FortiGate can discover the APs and authorize them. However, FortiGate is unable to establish CAPWAP tunnels to manage the APs.
Which configuration setting can the administrator perform to resolve the problem?

Default VLANs are created on FortiGate when the FortiLink interface is created.
By default, which VLAN is set as Allowed VLANs on all FortiSwitch ports?