Online Access Free FCSS_LED_AR-7.6 Practice Test

Which three FortiAuthenticator configuration elements are involved in RSSO processing?
(Choose three)
Response:

• A.DNS Filter
• B.RSSO Attribute
• C.RADIUS Client
• D.Syslog Server
• E.Group Mapping

A FortiSwitch is not appearing in the FortiGate management interface after being connected via FortiLink.
What could be a first troubleshooting step?

• A.Ensure the FortiSwitch has internet access.
• B.Verify that FortiGate device DHCP server is assigning an IP to the FortiSwitch.
• C.Ensure that the FortiGate security policies allow traffic from the FortiSwitch.
• D.Manually assign a static IP to the FortiSwitch.

Which features does FortiAuthenticator support when acting as a certificate authority (CA)?
Response:

• A.It can act as a self-signer for issuing and revoking digital certificates.
• B.It functions solely as a CRL repository and does not support certificate signing requests (CSR).
• C.It can integrate with third-party certificate authorities to validate external certificates.
• D.It can issue and revoke digital certificates but cannot act as an OCSP server.

If a FortiAP fails to connect to FortiGate, which component should be checked first?
Response:

• A.SNMP settings
• B.DNS records
• C.FortiManager schedule
• D.CAPWAP discovery configuration

Refer to the exhibits.
FortiGate RSSO configuration

FortiGate RSSO Group

FortiGate interface configuration

RSSO authentication has been configured on FortiGate. Port3 has been enabled to receive RADIUS accounting messages. Internet access is available through port1. FortiGate is successfully handling incoming RADIUS accounting messages, ensuring that RSSO users are correctly mapped to the RSSO Group user group. The administrator realized that internet access is open to all users and aims to enforce access restrictions, ensuring that only RSSO users are permitted to have internet access. Which configuration change should the administrator apply to address this issue? Response:

• A.Create a second firewall policy from port3 to port1, and select the target destination subnets.
• B.Change the RADIUS attribute value setting to match the name of the RADIUS attribute containing the group membership information of the RSSO users.
• C.Configure a local user group and manually add users to enforce authentication-based restrictions.
• D.Modify the firewall policy and add RSSO Group as a Source.