NSE7_LED-7.0試験無料問題集（63題）「Fortinet NSE 7

出題：1

Refer to the exhibit.

The exhibit shows a network topology and SSID settings. FortiGate is configured to use an external captive portal.
However, wireless users are not able to see the captive portal login page.
Which configuration change should the administrator make to fix the problem?

A. Add the FortiAuthenticator and WindowsAD address objects as exempt sources.

B. Create a firewall policy to allow traffic from the Guest SSID to FortiAuthenticator and Windows AD devices.

C. Enable the captive-portal-exempt option in the firewall policy with the ID 10.

D. Remove the guest.portal user group in the firewall policy.

正解：B 解答を投票する

出題：2

Which three protocols are used for controlling FortiSwitch devices on FortiGate? (Choose three.)

A. CAPWAP

B. IGMP

C. FortiLink

D. HTTPS

E. FTP

正解：A,B,E 解答を投票する

出題：3

Refer to the exhibit.

Examine the partial debug output shown in the exhibit.

Which two statements about the debug output are true? (Choose1 two.)

A. The Training-Lab LDAP server is configured to use regular bind.

B. The LDAP DN search did not match any LDAP user.

C. The connection to the Training-Lab LDAP server timed out.

D. The credentials provided for student are correct.

正解：A,D 解答を投票する

出題：4

Refer to the exhibits.

The CLI output shows a FortiGate configuration supporting a remote AP in an employee's home. The employee requires access to resources located on the company network, including the database server and AD server. The employee is trying to print to a printer connected in their home, but is not able to.
Which two solutions would resolve the issue? (Choose two.)

A. Configure the FARU431F-EmployeeHome wtp-profile to add a split tunneling ACL with a destination subnet of 192.168.1.1/24, using the command set dest-ip 192.168.1.1/24.

B. Configure the FAPU431F-EmployeeHome WTP profile to enable split tunneling to the AP subnet using the command set split-tunneling-acl-local-ap-subnet enable.

C. Configure the EmployeeHome VAP profile to disable host isolation using the command set intra-vap- privacy disable.

D. Configure the EmployeeHome VAP profile for local bridging using the command set local-bridging enable.

正解：A,B 解答を投票する

出題：5

Refer to the exhibit

A device connected to port2 on FortiSwitch cannot access the network The port is assigned a security policy to enforce 802 1X authentication While troubleshooting the issue, the administrator obtains the debug output shown in the exhibit Which two scenarios are likely to cause this issue? (Choose two.)

A. The device is not configured for 802 IX authentication.

B. The device does not support 802 1X authentication

C. The device has been assigned the guest VLAN

D. The device has been quarantined for 3600 seconds.

正解：A,B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Which statement correctly describes the guest portal behavior on FortiAuthenticator?

A. Sponsored accounts cannot authenticate using guest portals.

B. All guest accounts must be activated using SMS or email activation codes.

C. All self-registered and sponsored accounts are listed on the local Users GUI page on FortiAuthenticator.

D. FortiAuthenticator uses POST parameters and a RADIUS client configuration to map the request to a guest portal for authentication.

正解：D 解答を投票する

NSE7_LED-7.0試験無料問題集「Fortinet NSE 7 - LAN Edge 7.0 認定」