Free Access Fortinet.NSE7_LED-7.0.v2025-11-13.q47 Practice Test (Page 2)

Question 1

Refer to the exhibit.

Examine the network diagram and packet capture shown in the exhibit
The packet capture was taken between FortiGate and FortiAuthenticator and shows a RADIUS Access- Request packet sent by FortiSwitch to FortiAuthenticator through FortiGate Why does the User-Name attribute in the RADIUS Access-Request packet contain the client MAC address?

A.The client is performing AD machine authentication

B.FortiSwitch is authenticating the client using MAC authentication bypass

C.The client is performing user authentication

D.FortiSwitch is sending a RADIUS accounting message to FortiAuthenticator

Question 2

Refer to the exhibit.

Examine the partial debug output shown in the exhibit.

Which two statements about the debug output are true? (Choose1 two.)

A.The credentials provided for student are correct.

B.The Training-Lab LDAP server is configured to use regular bind.

C.The LDAP DN search did not match any LDAP user.

D.The connection to the Training-Lab LDAP server timed out.

Question 3

When you configure a FortiAP wireless interface for auto TX power control which statement describes how it configures its transmission power?

A.Every 30 seconds the AP will measure the signal strength of the AP using the client The AP will adjust its signal strength up or down until the AP signal is detected at -70 dBm

B.Every 30 seconds FortiGate measures the signal strength of adjacent AP interfaces It will adjust its own AP power to match the adjacent AP signal strength

C.Every 30 seconds FortiGate measures the signal strength of adjacent FortiAP interfaces It will adjust the adjacent AP power to be detectable at -70 dBm

D.Every 30 seconds FortiGate measures the signal strength of the weakest associated client The AP will then configure its radio power to match the detected signal strength of the client

Question 4

A wireless network in a school provides guest access using a captive portal to allow unregistered users to self-register and access the network. The administrator is requested to update the existing configuration to provide captive portal authentication through a secure connection (HTTPS).
Which two changes must the administrator make to enforce HTTPS authentication? (Choose two)

A.Create a new SSID with the HTTPS captive portal URL

B.Enable HTTP redirect in the user authentication settings

C.Disable HTTP administrative access on the guest SSID to enforce HTTPS connection

D.Update the captive portal URL to use HTTPS on FortiGate and FortiAuthenticator

Question 5

Refer to the exhibit. Examine the network diagram and packet capture shown in the exhibit.
The packet capture was taken between FortiGate and FortiAuthenticator, and shows a RADIUS Access-Request packet sent by FortiSwitch to FortiAuthenticator through FortiGate.
Why does the User-Name attribute in the RADIUS Access-Request packet contain the client MAC address?