Fortinet NSE7_LED-7.0 Quiz 1 Topic 1 Questions 1-5

Question: 1

Refer to the exhibit.

q1_NSE7_LED-7.0

By default FortiOS creates the following DHCP server scope for the FortiLink interface as shown in the exhibit

What is the objective of the vci-string setting?

ATo ignore DHCP requests coming from FortiSwitch and FortiExtender devices

BTo reserve IP addresses for FortiSwitch and FortiExtender devices

CTo restrict the IP address assignment to FortiSwitch and FortiExtender devices

DTo restrict the IP address assignment to devices that have FortiSwitch or FortiExtender as their hostname

Show Answer

Question: 2

Refer to the exhibit.

q2_NSE7_LED-7.0

Examine the debug output shown in the exhibit

Which two statements about the RADIUS debug output are true'' (Choose two)

AThe user student belongs to the SSLVPN group

BUser authentication failed

CThe RADIUS server sent a vendor-specific attribute in the RADIUS response

DUser authentication succeeded using MSCHAP

Show Answer

Question: 3

Where can FortiGate learn the FortiManager IP address or FQDN for zero-touch provisioning'?

AFrom an LDAP server using a simple bind operation

BFrom a TFTP server

CFrom a DHCP server using options 240 and 241

DFrom a DNS server using A or AAAA records

Show Answer

Question: 4

Refer to the exhibit

q4_NSE7_LED-7.0

Examine the FortiGate RSSO configuration shown in the exhibit

FortiGate is configured to receive RADIUS accounting messages on port3 to authenticate RSSO users The users are located behind port3 and the internet link is connected to port1 FortiGate is processing incoming RADIUS accounting messages successfully and RSSO users are getting associated with the RSSO Group user group However all the users are able to access the internet, and the administrator wants to restrict internet access to RSSO users only

Which configuration change should the administrator make to fix the problem?

AChange the RADIUS Attribute Value selling to match the name of the RADIUS attribute containing the group membership information of the RSSO users

BAdd RSSO Group to the firewall policy

CEnable Security Fabric Connection on port3

DCreate a second firewall policy from port3 lo port1 and select the target destination subnets

Show Answer

Question: 5

Which two statements about the guest portal on FortiAuthenticator are true? (Choose two.)

AEach remote user on FortiAuthenticator can sponsor up to 10 guest accounts

BAdministrators must approve all guest accounts before they can be used

CThe guest portal provides pre and post-log in services

DAdministrators can use one or more incoming parameters to configure a mapping rule for the guest portal

Show Answer

Fortinet NSE7_LED-7.0 Quiz:1 Topic:1 Questions:1-5