Question 1

Which two statements about FortiSwitch manager are true1? (Choose two)

Options :

A : Per-device management is the default management mode on FortiManager

B :

FortiManager obtains the FortiSwitch status information by querying the FortiGate REST API every three minutes

C :

If the administrator makes any changes on FortiSwitch manager they must also install those changes on FortiGate so that those changes are applied on the managed switches

D : Any switch discovered or authorized on FortiGate must be added manually on FortiSwitch manager

Answer: B,C

Question 2

Refer to the exhibit

Examine the sections of the configuration shown in the output What action will FortiGate take when verifying the student certificate through OCSP?

Options :

A : Reject the student certificate if the OCSP server replies that the student certificate status is unknown

B : Not verify the OCSP server certificate

C : Use the OCSP URL included in the student certificate to verify the student certificate

D : Consider the student certificate status as valid if the OCSP server is unreachable

Answer: A

Question 3

Refer to the exhibit.

Examine the debug output shown in the exhibit Which two statements about the RADIUS debug output are true'' (Choose two)

Options :

A : The user student belongs to the SSLVPN group

B : User authentication failed

C : The RADIUS server sent a vendor-specific attribute in the RADIUS response

D : User authentication succeeded using MSCHAP

Answer: A,D

Question 4

An administrator is deploying a new FortiGate device using zero-touch provisioning. Before deployment, the administrator added the FortiGate serial number on FortiManager and configured all the FortiGate settings FortiGate has a factory default configuration. However, when the administrator connects FortiGate to the network, FortiManager does not start the installation automatically. Which two scenarios are likely to cause this issue? (Choose two.)

Options :

A : The serial number added on FortiManager does not match the FortiGate serial number.

B : The DHCP server that serves FortiGate is not configured with options 240 and 241.

C : Zero-touch provisioning is disabled on FortiManager.

D : The pre-shared key set on FortiManager does not match the one set on FortiGate.

Answer: A,B

Question 5

Which CLI command should an administrator use to view the certificate verification process in real time?

Options :

A : diagnose debug application foauthd -1

B : diagnose debug application radiusd -1

C : diagnose debug application authd -1

D : diagnose debug application fnbamd -1

Answer: A

Higher Test Marks with Free Online NSE7_LED-7.0 Exam Practice

Buying Options: