NSE7_LED-7.0試験無料問題集（63題）「Fortinet NSE 7

出題：1

Refer to the exhibits.

Examine the VAP configuration and the Wi-Fi zones table shown in the exhibits.

Which two statements describe the FortiGate behavior regarding assignment of VLANs to wireless clients?
(Choose two.)

A. All clients connecting to the Corp SSID will receive an IP address from the 10.0.3.1/24 subnet.

B. Clients connecting to APs in the Floor group will not be able to receive an IP address.

C. Clients connecting to APs in the Office group will be assigned to VLAN 102.

D. FortiGate will load balance clients using VLAN 101 and VLAN 102 and assign them an IP address from the 10.0.3.0/24 subnet.

正解：B,C 解答を投票する

出題：2

To troubleshoot configuration push issues on a managed FortiSwitch, which FortiGate process should an administrator enable debug for?

A. flcfgd

B. httpsd

C. cu_acd

D. fortilinkd

正解：A 解答を投票する

出題：3

When you configure a FortiAP wireless interface for auto TX power control which statement describes how it configures its transmission power"?

A. Every 30 seconds FortiGate measures the signal strength of adjacent FortiAP interfaces It will adjust the adjacent AP power to be detectable at -70 dBm

B. Every 30 seconds the AP will measure the signal strength of the AP using the client The AP will adjust its signal strength up or down until the AP signal is detected at -70 dBm

C. Every 30 seconds FortiGate measures the signal strength of the weakest associated client The AP will then configure its radio power to match the detected signal strength of the client

D. Every 30 seconds FortiGate measures the signal strength of adjacent AP interfaces It will adjust its own AP power to match the adjacent AP signal strength

正解：A 解答を投票する

出題：4

Refer to the exhibits.

Examine the debug output and the SSL VPN configuration shown in the exhibits.

An administrator has configured SSL VPN on FortiGate. To improve security, the administrator enabled Required Client Certificate on the SSL VPN configuration page. However, a user is unable to successfully authenticate to SSL VPN.
Which configuration change should the administrator make to fix the problem?

A. Import the CA that signed the user certificate to FortiGate.

B. Enable Redirect HTTP to SSL-VPN on the SSL VPN configuration page.

C. Import the CA that signed the SSL VPN Server Certificate to FortiGate.

D. Set the user certificate as the Server Certificate on the SSL VPN configuration page.

正解：A 解答を投票する

出題：5

Which two statements about FortiSwitch trunks are true? (Choose two.)

A. Trunks do not support tagged Ethernet frames.

B. By default, when connecting two FortiSwitch devices to each other, a trunk is automatically created between the switches.

C. A trunk is a link aggregation group interface.

D. LACP is not supported.

正解：B,C 解答を投票する

出題：6

Refer to the exhibit.

Examine the debug output shown in the exhibit
Which two statements about the RADIUS debug output are true'' (Choose two)

A. User authentication succeeded using MSCHAP

B. User authentication failed

C. The RADIUS server sent a vendor-specific attribute in the RADIUS response

D. The user student belongs to the SSLVPN group

正解：C,D 解答を投票する

出題：7

Refer to the exhibits.

In the WTP profile configuration shown in the exhibit, the AP profile is assigned to two FAP-320 APs that are installed in an open plan office.

The first AP has 32 clients associated with the 5 GHz radios and 22 clients associated with the 2.4 GHz radio.
The second AP has 12 clients associated with the 5 GHz radios and 20 clients associated with the 2.4 GHz radio.
A dual-band-capable client enters the office near the first AP and the first AP measures the new client at -33 dBm signal strength. The second AP measures the new client at 2 -43 dBm signal strength.
If the new client attempts to connect to the corporate wireless network, with which AP radio will the client be associated?

A. The second AP 2.4 GHz interface.

B. The second AP 5 GHz interface.

C. The first AP 2.4 GHz interface.

D. The first AP 5 GHz interface.

正解：B 解答を投票する

NSE7_LED-7.0試験無料問題集「Fortinet NSE 7 - LAN Edge 7.0 認定」