Fortinet NSE 7 - LAN Edge 7.0 (NSE7_LED-7.0) Free Practice Test

Question 1

Refer to the exhibits

The exhibits show the wireless network (VAP) SSID profiles defined on FortiManager and an AP profile assigned to a group of APs that are supported by FortiGate None of the APs are broadcasting the SSlDs defined by the AP profile Which changes do you need to make to enable the SSIDs to broadcast?

A. In the SSIDs section enable Tunnel

B. Enable multiple channels in the Channels section and enable Radio Resource Provision

C. In the SSIDs section enable Manual and assign the networks manually

D. Enable one channel in the Channels section

Correct Answer: C

Question 2

When you configure a FortiAP wireless interface for auto TX power control which statement describes how it configures its transmission power"?

A. Every 30 seconds FortiGate measures the signal strength of adjacent AP interfaces It will adjust its own AP power to match the adjacent AP signal strength

B. Every 30 seconds the AP will measure the signal strength of the AP using the client The AP will adjust its signal strength up or down until the AP signal is detected at -70 dBm

C. Every 30 seconds FortiGate measures the signal strength of adjacent FortiAP interfaces It will adjust the adjacent AP power to be detectable at -70 dBm

D. Every 30 seconds FortiGate measures the signal strength of the weakest associated client The AP will then configure its radio power to match the detected signal strength of the client

Correct Answer: C

Question 3

Refer to the exhibit.

Examine the LDAP server configuration shown in the exhibit Note that the Username setting has been expanded to display Its full content On the Windows AD server 10.0.1.10, the administrator used dsquery. which returned the following output:

According to the output which FortiGate LDAP setting is configured incorrectly''

A. Distinguished Name

B. Bind Type

C. Common Name Identifier

D. Username

Correct Answer: A

Question 4

Refer to the exhibit.

By default FortiOS creates the following DHCP server scope for the FortiLink interface as shown in the exhibit What is the objective of the vci-string setting?

A. To reserve IP addresses for FortiSwitch and FortiExtender devices

B. To restrict the IP address assignment to FortiSwitch and FortiExtender devices

C. To restrict the IP address assignment to devices that have FortiSwitch or FortiExtender as their hostname

D. To ignore DHCP requests coming from FortiSwitch and FortiExtender devices

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Which CLI command should an administrator use on FortiGate to view the RSSO authentication process in real time?

A. diagnose debug application authd -1

B. diagnose debug application fnbamd -1

C. diagnose debug application foauthd -1

D. diagnose debug application radiusd -1

Correct Answer: B

Question 6

A wireless network in a school provides guest access using a captive portal to allow unregistered users to self- register and access the network The administrator is requested to update the existing configuration to provide captive portal authentication through a secure connection (HTTPS) Which two changes must the administrator make to enforce HTTPS authentication"? (Choose two >

A. Enable HTTP redirect in the user authentication settings

B. Update the captive portal URL to use HTTPS on FortiGate and FortiAuthenticator

C. Disable HTTP administrative access on the guest SSID to enforce HTTPS connection

D. Create a new SSID with the HTTPS captive portal URL

Correct Answer: A,B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

Refer to the exhibit.

Examine the FortiSwitch port configuration and the FortiGate interface configuration shown in the exhibit.

Based on the configuration shown in the exhibit, which two statements about how port2 handles tagged and untagged traffic are true? (Choose two.)

A. Port2 assigns ingress untagged traffic to VLAN 10.

B. Port2 tags egress traffic for VLAN 10.

C. Port2 accepts ingress untagged traffic for VLAN IDs 10, 4091, and 4093 only.

D. Port2 accepts ingress tagged traffic for VLAN IDs 4091 and 4093 only.

Correct Answer: A,C

Welcome to TestSimulate

Fortinet NSE 7 - LAN Edge 7.0 (NSE7_LED-7.0) Free Practice Test