Free Access Fortinet.NSE7_LED-7.0.v2025-09-29.q47 Practice Test (Page 11)

Question 46

Which two statements about FortiSwitch manager are true1? (Choose two)

A.Per-device management is the default management mode on FortiManager

B.FortiManager obtains the FortiSwitch status information by querying the FortiGate REST API every three minutes

C.If the administrator makes any changes on FortiSwitch manager they must also install those changes on FortiGate so that those changes are applied on the managed switches

D.Any switch discovered or authorized on FortiGate must be added manually on FortiSwitch manager

Question 47

Refer to the exhibit.

Examine the IPsec VPN phase 1 configuration shown in the exhibit
An administrator wants to use certificate-based authentication for an IPsec VPN user Which three configuration changes must you make on FortiGate to perform certificate-based authentication for the IPsec VPN user? (Choose three)

A.In the IKE section of the IPsec VPN tunnel, in the Mode field, select Main (ID protection).

B.Import the CA that signed the user certificate.

C.Create a PKI user for the IPsec VPN user, and then configure the IPsec VPN tunnel to accept the PKI user as peer certificate.

D.Enable XAUTH on the IPsec VPN tunnel.

E.In the Authentication section of the IPsec VPN tunnel, in the Method drop-down list, select Signature, and then select the certificate that FortiGate will use for IPsec VPN.

Other Version: 130Fortinet.NSE7_LED-7.0.v2025-11-13.q47

Latest Upload: 124Oracle.1z1-830.v2025-11-13.q29; 148ASQ.CMQ-OE.v2025-11-13.q421; 130Fortinet.NSE7_LED-7.0.v2025-11-13.q47; 143Salesforce.MCE-Admn-201.v2025-11-12.q57; 188Salesforce.Marketing-Cloud-Account-Engagement-Specialist.v2025-11-12.q194; 124ITIL.ITIL4-DPI.v2025-11-12.q14; 140RUCKUS.RCWA.v2025-11-12.q49; 144Alibaba.SAE-C01.v2025-11-11.q58; 160Salesforce.Manufacturing-Cloud-Professional.v2025-11-10.q130; 138CIPS.L5M10.v2025-11-10.q31

Question 46

Question 47

Download PDF File