Refer to the exhibit.
By default FortiOS creates the following DHCP server scope for the FortiLink interface as shown in the exhibit
What is the objective of the vci-string setting?

ATo ignore DHCP requests coming from FortiSwitch and FortiExtender devices

BTo reserve IP addresses for FortiSwitch and FortiExtender devices

CTo restrict the IP address assignment to FortiSwitch and FortiExtender devices

DTo restrict the IP address assignment to devices that have FortiSwitch or FortiExtender as their hostname

1 answers

71 votes

1388

Answer Link

Refer to the exhibit.
Examine the debug output shown in the exhibit
Which two statements about the RADIUS debug output are true'' (Choose two)

AThe user student belongs to the SSLVPN group

BUser authentication failed

CThe RADIUS server sent a vendor-specific attribute in the RADIUS response

DUser authentication succeeded using MSCHAP

1 answers

72 votes

1147

A, D

Answer Link

Where can FortiGate learn the FortiManager IP address or FQDN for zero-touch provisioning'?

AFrom an LDAP server using a simple bind operation

BFrom a TFTP server

CFrom a DHCP server using options 240 and 241

DFrom a DNS server using A or AAAA records

1 answers

76 votes

939

Answer Link

Refer to the exhibit
Examine the FortiGate RSSO configuration shown in the exhibit
FortiGate is configured to receive RADIUS accounting messages on port3 to authenticate RSSO users The users are located behind port3 and the internet link is connected to port1 FortiGate is processing incoming RADIUS accounting messages successfully and RSSO users are getting associated with the RSSO Group user group However all the users are able to access the internet, and the administrator wants to restrict internet access to RSSO users only
Which configuration change should the administrator make to fix the problem?

AChange the RADIUS Attribute Value selling to match the name of the RADIUS attribute containing the group membership information of the RSSO users

BAdd RSSO Group to the firewall policy

CEnable Security Fabric Connection on port3

DCreate a second firewall policy from port3 lo port1 and select the target destination subnets

1 answers

97 votes

1419

Answer Link

Which two statements about the guest portal on FortiAuthenticator are true? (Choose two.)

AEach remote user on FortiAuthenticator can sponsor up to 10 guest accounts

BAdministrators must approve all guest accounts before they can be used

CThe guest portal provides pre and post-log in services

DAdministrators can use one or more incoming parameters to configure a mapping rule for the guest portal

1 answers

96 votes

1358

C, D

Answer Link

Fortinet NSE7_LED-7.0 Quiz:1 Topic:1 Questions:1-5

Free Practice Mock Questions Set 1-5 (Quiz # 1) for Fortinet NSE7_LED-7.0 Exam, according to official Fortinet NSE 7 - LAN Edge 7.0 exam syllabus topic # 1

Quiz 1

Refer to the exhibit.By default FortiOS creates the following DHCP server scope for the FortiLink interface as shown in the exhibitWhat is the objective of the vci-string setting?

Refer to the exhibit.Examine the debug output shown in the exhibitWhich two statements about the RADIUS debug output are true'' (Choose two)

Where can FortiGate learn the FortiManager IP address or FQDN for zero-touch provisioning'?

Which two statements about the guest portal on FortiAuthenticator are true? (Choose two.)

Fortinet NSE7_LED-7.0 Quiz:1 Topic:1 Questions:1-5

Refer to the exhibit.
By default FortiOS creates the following DHCP server scope for the FortiLink interface as shown in the exhibit
What is the objective of the vci-string setting?

Refer to the exhibit.
Examine the debug output shown in the exhibit
Which two statements about the RADIUS debug output are true'' (Choose two)