NSE7_SAC-6.2試験無料問題集（30題）「Fortinet NSE 7

出題：1

What does DHCP snooping MAC verification do?

A. Drops DHCP packets on untrusted ports when the client hardware address does not match the source MAC address

B. Drops DHCP offer packets on untrusted ports

C. Drops DHCP packets with no relay agent information (option 82) on untrusted ports

D. Drops DHCP release packets on untrusted ports

正解：A 解答を投票する

出題：2

802.1X port authentication is enabled on only those ports that the FortiSwitch security policy is assigned to.
Whichconfigurable items are available when you configure the security policy on FortiSwitch? (Choose two.)

A. Security mode

B. User groups

C. FSSO groups

D. Default guest group

正解：A,B 解答を投票する

出題：3

Refer to the exhibit showing certificate values.

Wireless guest users are unable to authenticate because they are getting a certificate error while loading the captive portal login page This URL string is the HTTPS POST URL guest wireless users see when attempting to access the network using the web browser:

Which two settings are the likely causes of the issue? (Choose two.)

A. The wireless user's browser is missing a CA certificate.

B. The FortiGate authentication interface address is using Hi IPS.

C. The user address is not in DDNS form.

D. The external server FQDN is incorrect.

正解：A,D 解答を投票する

NSE7_SAC-6.2試験無料問題集「Fortinet NSE 7 - Secure Access 6.2 認定」