Question 1

Refer to the exhibit.

Examine the debug output shown in the exhibit Which two statements about the RADIUS debug output are true'' (Choose two)

Options :

A : The user student belongs to the SSLVPN group

B : User authentication failed

C : The RADIUS server sent a vendor-specific attribute in the RADIUS response

D : User authentication succeeded using MSCHAP

Answer: A,D

Question 2

Refer to the exhibit.

Examine the FortiSwitch security policy shown in the exhibit If the security profile shown in the exhibit is assigned to all ports on a FortiSwitch device for 802 1X authentication which statement about the switch is correct?

Options :

A : FortiSwitch cannot authenticate multiple devices connected to the same port

B :

FortiSwitch will try to authenticate non-802 1X devices using the device MAC address as the username and password

C : FortiSwitch will assign non-802 1X devices to the onboarding VLAN

D : All EAP messages will be terminated on FortiSwitch

Answer: C

Question 3

Which CLI command should an administrator use to view the certificate verification process in real time?

Options :

A : diagnose debug application foauthd -1

B : diagnose debug application radiusd -1

C : diagnose debug application authd -1

D : diagnose debug application fnbamd -1

Answer: A

Question 4

Refer to the exhibit.

Examine the IPsec VPN phase 1 configuration shown in theexhibit An administrator wants to use certificate-based authentication for an IPsec VPN user Which three configuration changes must you make on FortiGate to perform certificate-based authentication for the IPsec VPN user? (Choose three)

Options :

A :

Create a PKI user for the IPsec VPN user, and then configure the IPsec VPN tunnel to accept the PKI user as peer certificate

B :

In the Authentication section of the IPsec VPN tunnel in the Method drop-down list select Signature and then select the certificate that FortiGate will use for IPsec VPN

C : In the IKE section of the IPsec VPN tunnel in the Mode field select Main (ID protection)

D : Import the CA that signed the user certificate

E : Enable XAUTH on the IPsec VPN tunnel

Answer: B,D,E

Question 5

Which two statements about FortiSwitch manager are true1? (Choose two)

Options :

A : Per-device management is the default management mode on FortiManager

B :

FortiManager obtains the FortiSwitch status information by querying the FortiGate REST API every three minutes

C :

If the administrator makes any changes on FortiSwitch manager they must also install those changes on FortiGate so that those changes are applied on the managed switches

D : Any switch discovered or authorized on FortiGate must be added manually on FortiSwitch manager

Answer: B,C

Higher Test Marks with Free Online NSE7_LED-7.0 Exam Practice

Buying Options: