Fortinet NSE7_LED-7.0 - Fortinet NSE 7 - LAN Edge 7.0 Exam
Page: 3 / 11
Total 51 questions
Question #11 (Topic: Exam A)
Which EAP method requires the use of a digital certificate on both the server end and the client end?
A. EAP-TTLS
B. PEAP
C. EAP-GTC
D. EAP-TLS
Answer: D
Question #12 (Topic: Exam A)
Refer to the exhibit.
Examine the FortiManager configuration and FortiGate CLI output shown in the exhibit.
An administrator is testing the NAC feature. The test device is connected to a managed FortiSwitch device (S224EPTF19005867) on port2.
After applying the NAC policy on port2 and generating traffic on the test device, the test device is not matching the NAC policy; therefore, the test device remains in the onboarding VLAN.
Based on the information shown in the exhibit, which two scenarios are likely to cause this issue? (Choose two.)
Examine the FortiManager configuration and FortiGate CLI output shown in the exhibit.
An administrator is testing the NAC feature. The test device is connected to a managed FortiSwitch device (S224EPTF19005867) on port2.
After applying the NAC policy on port2 and generating traffic on the test device, the test device is not matching the NAC policy; therefore, the test device remains in the onboarding VLAN.
Based on the information shown in the exhibit, which two scenarios are likely to cause this issue? (Choose two.)
A. Management communication between FortiGate and FortiSwitch is down.
B. The MAC address configured on the NAC policy is incorrect.
C. The device operating system detected by FortiGate is not Linux.
D. Device detection is not enabled on VLAN 4089.
Answer: BC
Question #13 (Topic: Exam A)
Which two pieces of information can the diagnose test authserver ldap command provide? (Choose two.)
A. It displays whether the admin bind user credentials are correct.
B. It displays whether the user credentials are correct.
C. It displays the LDAP codes returned by the LDAP server.
D. It displays the LDAP groups found for the user.
Answer: BD
Question #14 (Topic: Exam A)
You are setting up an SSID (VAP) to perform RADIUS-authenticated dynamic VLAN allocation.
Which three RADIUS attributes must be supplied by the RADIUS server to enable successful VLAN allocation? (Choose three.)
Which three RADIUS attributes must be supplied by the RADIUS server to enable successful VLAN allocation? (Choose three.)
A. Tunnel-Private-Group-ID
B. Tunnel-Pvt-Group-ID
C. Tunnel-Preference
D. Tunnel-Type
E. Tunnel-Medium-Type
Answer: BDE
Question #15 (Topic: Exam A)
Refer to the exhibit.
Examine the FortiManager information shown in the exhibit.
Which two statements about the FortiManager status are true? (Choose two.)
Examine the FortiManager information shown in the exhibit.
Which two statements about the FortiManager status are true? (Choose two.)
A. FortiSwitch manager is working in per-device management mode.
B. FortiSwitch is not authorized.
C. FortiSwitch manager is working in central management mode.
D. FortiSwitch is authorized and offline.
Answer: AD
