Free Fortinet NSE 6 – LAN Edge 7.6 Architect Exam FCSS_LED_AR-7.6 Exam Practice Test

Which VLAN is used by FortiGate to place devices that fail to match any configured NAC policies? CRSPAN

• NAC
• segment
• Quarantine
• Onboarding

What is the expected behavior when enabling auto TX power control on a FortiAP interface?

• FortiGate monitors the signal strength of nearby AP interfaces and adjusts its own transmit power every 30 seconds to match the signal strength of the adjacent AP
• FortiGate measures the signal strength of nearby FortiAP interfaces every 30 seconds and adjusts their transmit power to ensure they remain detectable at -70 dBm.
• FortiGate periodically measures the signal strength of the weakest associated client and adjusts the AP radio power to align with the detected signal strength of that client.
• The AP periodically evaluates the signal strength of its own transmission from the client perspective and adjusts its power to ensure the signal is detected at -70 dBm.

You are troubleshooting a Syslog-based single sign-on (SSO) issue on FortiAuthenticator, where user authentication is not being correctly mapped from the syslog messages. You need a tool to diagnose the issue and understand the logs to resolve it quickly.Which tool in FortiAuthenticator can you use to troubleshoot and diagnose a Syslog SSO issue?

• Debug logs > Remote Servers > Syslog Viewer
• Parsing Test Tool
• Debug logs > SSO Sessions page
• Debug logs > Single Sign-On > Syslog SSO

In each user certificate, you can define the subject field, expiration date. User Principal Name (UPN), URL for CRL download, and the OCSP URL. How does the detailed configuration of these attributes impact the certificate?

• It makes the certificate easier to revoke manually because it reduces the need for automatic checks.
• It limits the validity of the certificate to specific devices and applications, reducing its general usability.
• It enables precise identification of the user and ensures timely certificate revocation checks.
• It makes the certificate compatible with a wide range of applications and services by ensuring universal validity

You are setting up a captive portal to provide Wi-Fi access for visitors. To simplify the process, your team wants visitors to authenticate using their existing social media accounts instead of creating newaccounts or entering credentials manually.Which two actions are required to enable this functionality? (Choose two.)

• Set up a remote open authorization (OAuth) server for each selected social media platform.
• Configure only the email login option because a social media login cannot be used with captive portals.
• Enable Account Login as the authentication type and configure a remote LDAP server.
• Set up the FortiAuthenticator internal database as the primary source for user credentials
• Configure the social login profiles for the supported platforms.

APs have been manually configured to connect to FortiGate over an IPsec network, and FortiGate successfully detects and authorizes them. However, the APs remain unmanaged because FortiGate is unable to establish a CAPWAP tunnel with them.What configuration change can resolve this issue and enable FortiGate to establish the CAPWAP tunnel over the IPsec connection?

• Configure a static route on FortiGate to reach the APs over the IPsec tunnel.
• Assign a custom AP profile for the remote APs with the set mpls-connection option enabled.
• Decrease the CAPWAP tunnel MTU size for APs to prevent fragmentation.
• Upgrade the FortiAP firmware image to ensure compatibility with the FortiOS version.

Connectivity tests are being performed on a newly configured VLAN. The VLAN is configured on a FortiSwitch device that is managed by FortiGate. During testing, it is observed that deviceswithin the VLAN can successfully ping FortiGate. and FortiGate can also ping these devices.Inter-VLAN communication is working as expected. However, devices within the same VLAN are unable to communicate with each other.What could be causing this issue?

• Access VLAN is enabled on the VLAN.
• The FortiSwitch MAC address table is missing entries.
• The FortiGate ARP table is missing entries.
• The native VLAN configured on the ports is incorrect.

When troubleshooting a captive portal issue, which POST parameter in the redirected HTTPS request can be used to track the user's session and ensure that the request is valid?

• username
• redir
• magic
• email

A conference center wireless network provides guest access through a captive portal, allowing unregistered users to self-register and connect to the network. The IT team has been tasked with updating the existing configuration to enforce captive portal authentication over a secure HTTPS connection. Which two steps should the administrator take to implement this change? (Choose two.)

• Enable HTTP redirect in the user authentication settings.
• Create a new SSID with the HTTPS captive portal URL.
• Disable HTTP administrative access on the guest SSID to enforce HTTPS connection.
• Update the captive portal URL to use HTTPS on FortiGate and FortiAuthenticator.

What is the primary function of FortiLink NAC in a LAN environment?

• To extend security policies across FortiGate firewalls only
• To automate device onboarding and verify security posture
• To manage FortiSwitch devices and apply manual firewall rules
• To ensure devices are manually placed in VLANs based on their user roles