Online Access Free NSE7_LED-7.0 Practice Test

Refer to the exhibit.

Examine the FortiManager configuration and FortiGate CLI output shown in the exhibit An administrator is testing the NAC feature The test device is connected to a managed FortiSwitch device
{S224EPTF19"53€7)onport2
After applying the NAC policy on port2 and generating traffic on the test device the test device is not matching the NAC policy therefore the test device remains m the onboarding VLAN Based on the information shown in the exhibit which two scenarios are likely to cause this issue? (Choose two.)

• A.The device operating system detected by FortiGate is not Linux
• B.The MAC address configured on the NAC policy is incorrect
• C.Device detection is not enabled on VLAN 4089
• D.Management communication between FortiGate and FortiSwitch is down

Refer to the exhibits.

Examine the VAP configuration and the Wi-Fi zones table shown in the exhibits.

Which two statements describe the FortiGate behavior regarding assignment of VLANs to wireless clients?
(Choose two.)

• A.Clients connecting to APs in the Floor group will not be able to receive an IP address.
• B.Clients connecting to APs in the Office group will be assigned to VLAN 102.
• C.All clients connecting to the Corp SSID will receive an IP address from the 10.0.3.1/24 subnet.
• D.FortiGate will load balance clients using VLAN 101 and VLAN 102 and assign them an IP address from the 10.0.3.0/24 subnet.

Refer to the exhibit.

Examine the IPsec VPN phase 1 configuration shown in the exhibit
An administrator wants to use certificate-based authentication for an IPsec VPN user Which three configuration changes must you make on FortiGate to perform certificate-based authentication for the IPsec VPN user? (Choose three)

• A.Create a PKI user for the IPsec VPN user, and then configure the IPsec VPN tunnel to accept the PKI user as peer certificate.
• B.Import the CA that signed the user certificate.
• C.In the Authentication section of the IPsec VPN tunnel, in the Method drop-down list, select Signature, and then select the certificate that FortiGate will use for IPsec VPN.
• D.Enable XAUTH on the IPsec VPN tunnel.
• E.In the IKE section of the IPsec VPN tunnel, in the Mode field, select Main (ID protection).

Refer to the exhibits.

Examine the LDAP server configuration and output shown in the exhibits.

Note that the Distinguished Name and Username settings on the LDAP server configuration have been expanded to display their full contents.
An LDAP user named student cannot authenticate. While testing the student account, the administrator gets the CLI output shown in the exhibit.
According to the output, which FortiGate LDAP server settings must the administrator check?

• A.Distinguished Name
• B.Common Name Identifier
• C.Username
• D.Bind Type

To troubleshoot configuration push issues on a managed FortiSwitch, which FortiGate process should an administrator enable debug for?

• A.cu_acd
• B.flcfgd
• C.fortilinkd
• D.httpsd