FCSS - LAN Edge 7.6 Architect (FCSS_LED_AR-7.6) Free Practice Test

Question 1

An LDAP server has been successfully configured on FortiGate, which forwards authentication requests to a Windows Active Directory (AD) server. Users can authenticate using PAP, but authentication fails with MSCHAPv2. Why is it not recommended to use PAP for authentication?

A. PAP does not support domain-based authentication for Active Directory.

B. PAP requires the use of an insecure port that is easily blocked by firewalls.

C. PAP is only supported for local user accounts, not external authentication sources.

D. PAP sends passwords in cleartext.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

You have decided to manage multiple FortiSwitch devices using FortiManager and its FortiSwitch Manager feature.
Which two statements accurately describe FortiSwitch Manager feature functionality? (Choose two.)

A. Per-device management is useful for deploying multiple switches with the same configuration.

B. FortiSwitch Manager displays the following statuses for FortiSwitch: active, inactive, pending, and unknown.

C. FortiSwitch Manager displays the following statuses for FortiSwitch: online, offline, unauthorized, and unknown.

D. In per-device management mode, you apply settings and profiles to individual FortiSwitch devices.

Correct Answer: C,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Refer to the exhibits.

The exhibits show the WTP profile and VAP CLI configurations on FortiGate managing a remote AP.
The AP is designed to grant a remote employee access to company network resources, including the database and AD servers. The employee can reach company resources but is unable to access a local printer at home.
What two solutions are required to fix this issue? (Choose two.)

A. Configure the EmployeeHome VAP profile for local bridging using the command set local- bridging enable.

B. Configure the S231F wtp-profile to add a split tunneling ACL with a destination subnet of
192.168.1.1/24,using the command set dest-ip 192.168.1.1/24

C. Configure the EmployeeHome VAP profile to disable host isolation using the command set intra-vap-privacy disable.

D. Configure the S231F wtp profile to enable split tunneling to the AP subnet using the command set split-tunneling-acl-local-ap-subnet enable.

Correct Answer: B,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Refer to the exhibits.

An LDAP server has been successfully configured on FortiGate, which forward LDAP authentication requests to a Windows Active Directory (AD) server. Wireless users report that they are unable to authenticate. Upon troubleshooting, you find that authentication fails when using MSCHAPv2.
What is the most likely reason for this issue?

A. A firewall policy is missing an LDAP authentication rule.

B. FortiGate does not support MSCHAPv2 for LDAP authentication.

C. The FortiGate LDAP configuration is missing the correct Bind DN.

D. The Windows AD server requires LDAPS (LDAP over SSL) for authentication.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Your team is planning to configure a FortiGate wireless network that automatically quarantines devices using automation stitches. Which two configurations must be in place for a wireless client to be successfully quarantined upon detecting IOC events? (Choose two.)

A. Configure FortiGate as a member of a Security Fabric group.

B. FortiAnalyzer must have a valid threat detection services license.

C. SSIDs must be configured in Bridge mode.

D. Enable Device Detection at the interface level.

Correct Answer: A,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

Refer to the exhibits.

The exhibits show the VAP configuration, Wi-Fi SSIDs, and zone table.
Which two statements describe how FortiGate handles VLAN assignment for wireless clients?
(Choose two.)

A. FortiGate will load balance clients using VLAN 101 and VLAN 102 and assign them an IP address from the 10.0.3.0/24 subnet.

B. Clients connecting to APs in the Floor 1 group will not be able to receive an IP address.

C. All clients connecting to the Corp Zone will receive an IP address from the 10.1.20.1/24 subnet.

D. Clients connecting to APs in the Office group will be assigned to VLAN 102.

Correct Answer: B,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

A FortiSwitch is not appearing in the FortiGate management interface after being connected via FortiLink. What could be a first troubleshooting step?

A. Ensure the FortiSwitch has internet access.

B. Ensure that the FortiGate security policies allow traffic from the FortiSwitch.

C. Verify that FortiGate device DHCP server is assigning an IP to the FortiSwitch.

D. Manually assign a static IP to the FortiSwitch.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

Refer to the exhibits.

Examine the network diagram and packet capture shown in the exhibit.
During packet capture analysis, a RADIUS Access-Request packet was detected being sent from FortiSwitch to FortiAuthenticator and passing through FortiGate. The capture shows that the User-Name attribute in the RADIUS Access-Request packet contains the client MAC address.
Why is the client MAC address contained in the User-Name attribute of the RADIUS Access- Request packet?

A. FortiAuthenticator is authenticating the client based on the device hostname.

B. FortiAuthenticator is performing machine authentication

C. MAC address-based authentication is being used for the client through MAC Authentication Bypass (MAB).

D. FortiGate is authenticating the client using 802.1X authentication.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Fortinet FCSS - LAN Edge 7.6 Architect (FCSS_LED_AR-7.6) Free Practice Test