Which step can be taken to ensure that only FortiAP devices receive IP addresses from a DHCP server on FortiGate?

A wireless network in a school provides guest accessusing a captive portal to allow unregistered users to self-register and access the network. The administrator is requested to update the existing configuration to provide captive portal authentication through a secure connection (HTTPS) to protect and encrypt guest user credentials after they receive the login information when registered for the first time.

Which two changes must the administrator make to enforce HTTPS authentication? (Choose two.)

Which CLI command should an administrator use to view the certificate validation process in real-time?