Online Access Free NSE7_LED-7.0 Practice Test

Wireless guest users are unable to authenticate because they are getting a certificate error while loading the captive portal login page. This URL string is the HTTPS POST URL guest wireless users see when attempting to access the network using the web browser

Which two settings are the likely causes of the issue? (Choose two.)

• A.The user address is not in DDNS form
• B.The external server FQDN is incorrect
• C.The wireless user's browser is missing a CA certificate
• D.The FortiGate authentication interface address is using HTTPS

Refer to the exhibits.

Examine the LDAP server configuration and output shown in the exhibits.

Note that the Distinguished Name and Username settings on the LDAP server configuration have been expanded to display their full contents.
An LDAP user named student cannot authenticate. While testing the student account, the administrator gets the CLI output shown in the exhibit.
According to the output, which FortiGate LDAP server settings must the administrator check?

• A.Distinguished Name
• B.Common Name Identifier
• C.Username
• D.Bind Type

Which two statements about the guest portal on FortiAuthenticator are true? (Choose two.)

• A.Administrators can use one or more incoming parameters to configure a mapping rule for the guest portal
• B.Each remote user on FortiAuthenticator can sponsor up to 10 guest accounts
• C.The guest portal provides pre and post-log in services
• D.Administrators must approve all guest accounts before they can be used

An administrator is testing the connectivity for a new VLAN The devices in the VLAN are connected to a FortiSwitch device that is managed by FortiGate Quarantine is disabled on FortiGate While testing the administrator noticed that devices can ping FortiGate and FortiGate can ping the devices The administrator also noticed that inter-VLAN communication works However intra-VLAN communication does not work Which scenario is likely to cause this issue?

• A.Access VLAN is enabled on the VLAN
• B.The native VLAN configured on the ports is incorrect
• C.The FortiSwitch MAC address table is missing entries
• D.The FortiGate ARP table is missing entries

Refer to the exhibit

Examine the FortiGate RSSO configuration shown in the exhibit
FortiGate is configured to receive RADIUS accounting messages on port3 to authenticate RSSO users The users are located behind port3 and the internet link is connected to port1 FortiGate is processing incoming RADIUS accounting messages successfully and RSSO users are getting associated with the RSSO Group user group However all the users are able to access the internet, and the administrator wants to restrict internet access to RSSO users only Which configuration change should the administrator make to fix the problem?

• A.Create a second firewall policy from port3 lo port1 and select the target destination subnets
• B.Enable Security Fabric Connection on port3
• C.Change the RADIUS Attribute Value selling to match the name of the RADIUS attribute containing the group membership information of the RSSO users
• D.Add RSSO Group to the firewall policy