Question 1

Refer to the exhibit

Examine the sections of the configuration shown in the output What action will FortiGate take when verifying the student certificate through OCSP?

Options :

A : Reject the student certificate if the OCSP server replies that the student certificate status is unknown

B : Not verify the OCSP server certificate

C : Use the OCSP URL included in the student certificate to verify the student certificate

D : Consider the student certificate status as valid if the OCSP server is unreachable

Answer: A

Question 2

Refer to the exhibit.

Examine the FortiSwitch security policy shown in the exhibit If the security profile shown in the exhibit is assigned to all ports on a FortiSwitch device for 802 1X authentication which statement about the switch is correct?

Options :

A : FortiSwitch cannot authenticate multiple devices connected to the same port

B :

FortiSwitch will try to authenticate non-802 1X devices using the device MAC address as the username and password

C : FortiSwitch will assign non-802 1X devices to the onboarding VLAN

D : All EAP messages will be terminated on FortiSwitch

Answer: C

Question 3

Refer to the exhibit.

The exhibit shows a network topology and SSID settings. FortiGate is configured to use an external captive portal. However, wireless users are not able to see the captive portal login page. Which configuration change should the administrator make to fix the problem?

Options :

A : Remove the guest.portal user group in the firewall policy.

B : Enable the captive-portal-exempt option in the firewall policy with the ID 10.

C :

Create a firewall policy to allow traffic from the Guest SSID to FortiAuthenticator and Windows AD devices.

D : Add the FortiAuthenticator and WindowsAD address objects as exempt sources.

Answer: C

Question 4

Which CLI command should an administrator use to view the certificate verification process in real time?

Options :

A : diagnose debug application foauthd -1

B : diagnose debug application radiusd -1

C : diagnose debug application authd -1

D : diagnose debug application fnbamd -1

Answer: A

Question 5

Which two statements about FortiSwitch manager are true1? (Choose two)

Options :

A : Per-device management is the default management mode on FortiManager

B :

FortiManager obtains the FortiSwitch status information by querying the FortiGate REST API every three minutes

C :

If the administrator makes any changes on FortiSwitch manager they must also install those changes on FortiGate so that those changes are applied on the managed switches

D : Any switch discovered or authorized on FortiGate must be added manually on FortiSwitch manager

Answer: B,C

Smartly Prepare Exam with Free Online NSE7_LED-7.0 Practice Test

Buying Options: