Fortinet FCSS_LED_AR-7.6 - Fortinet NSE 6 - LAN Edge 7.6 Architect Exam
Page: 3 / 15
Total 72 questions
Question #11 (Topic: Exam A)
Refer to the exhibit.
The exhibit shows an LDAP server configuration with the Username setting has been expanded to display its full content.
The administrator has configured the LDAP settings on FortiGate and is troubleshooting for authentication issues.
As part of the troubleshooting steps, the administrator runs the command dsquery user -samid student on the Windows Active Directory (AD) server with an IP address 10.0.1.10 and received the output CN=student, CN=Users, DC=trainingAD, DC=training, DC=lab.
Based on the dsquery output, which LDAP setting on FortiGate is misconfigured?
The exhibit shows an LDAP server configuration with the Username setting has been expanded to display its full content.
The administrator has configured the LDAP settings on FortiGate and is troubleshooting for authentication issues.
As part of the troubleshooting steps, the administrator runs the command dsquery user -samid student on the Windows Active Directory (AD) server with an IP address 10.0.1.10 and received the output CN=student, CN=Users, DC=trainingAD, DC=training, DC=lab.
Based on the dsquery output, which LDAP setting on FortiGate is misconfigured?
A. The Common Name Identifier is incorrectly set, causing authentication failures.
B. The Bind Type is incorrectly configured, preventing FortiGate from connecting to the LDAP server.
C. The Distinguished Name setting is incorrectly configured, causing issues with user authentication.
D. Sever IP/Name is misconfigured so FortiGate can’t reach the LDAP server.
Answer: C
Question #12 (Topic: Exam A)
In a Windows environment using AD machine authentication, how does FortiAuthenticator ensure that a previously authenticated device is maintaining its network access once the device resumes operating after sleep or hibernation?
A. It sends a wake-on-LAN packet to trigger reauthentication.
B. It caches the MAC address of authenticated devices for a configurable period of time.
C. It temporarily assigns the device to a guest VLAN until full reauthentication is completed.
D. It uses machine authentication based on the device IP address.
Answer: B
Question #13 (Topic: Exam A)
You are troubleshooting an issue where users are being intermittently redirected to an error page after submitting their login credentials on a captive portal. As part of your troubleshooting steps, you review the POST parameters sent from the client to the authentication server.
What should you check in the magic ID within the POST parameters to help resolve the issue?
What should you check in the magic ID within the POST parameters to help resolve the issue?
A. Determine whether the magic ID has expired, which could cause the server to reject the authentication request.
B. Validate that the magic ID contains encryption keys for securing the user’s password during transmission.
C. Verify whether the magi ID matches the session generated by the server to ensure the request is valid.
D. Confirm that the magic ID is tied to the correct redirection URL for the user session.
Answer: C
Question #14 (Topic: Exam A)
You need to deploy FortiAPs at remote locations and want to avoid high latency by minimizing interference from FortiGate.
Which SSID traffic mode is best suited for this deployment?
Which SSID traffic mode is best suited for this deployment?
A. Hybrid mode
B. Local mode
C. Bridge mode
D. Tunnel mode
Answer: C
Question #15 (Topic: Exam A)
When troubleshooting a FortLink connectivity issue between FortiGate and FortiSwitch, why is it important to verify their time and date settings?
A. Time synchronization is critical for the CAPWAP DTLS tunnel.
B. Time and date are used to determine the encryption algorithm on FortiLink.
C. Incorrect time synchronization may disrupt the FortiLink discovery protocol (LLDP or MCLAG).
D. Matching time settings ensure proper STP convergence on the FortiLink interface.
Answer: A
