Free Fortinet NSE 7 – LAN Edge 7.0 Exam NSE7_LED-7.0 Exam Practice Test

Which two statements about MAC address quarantine by redirect mode are true? (Choose two)

• The quarantined device is moved to the quarantine VLAN
• The device MAC address is added to the Quarantined Devices firewall address group
• It is the default mode for MAC address quarantine
• The quarantined device is kept in the current VLAN

Which EAP method requires the use of a digital certificate on both the server end and the client end?

• EAP-TTLS
• PEAP
• EAP-GTC
• EAP-TLS

A wireless network in a school provides guest access using a captive portal to allow unregistered users to self-register and access the network The administrator is requested to update the existing configuration to provide captive portal authentication through a secure connection (HTTPS)Which two changes must the administrator make to enforce HTTPS authentication"? (Choose two >

• Create a new SSID with the HTTPS captive portal URL
• Enable HTTP redirect in the user authentication settings
• Disable HTTP administrative access on the guest SSID to enforce HTTPS connection
• Update the captive portal URL to use HTTPS on FortiGate and FortiAuthenticator

Where can FortiGate learn the FortiManager IP address or FQDN for zero-touch provisioning'?

• From an LDAP server using a simple bind operation
• From a TFTP server
• From a DHCP server using options 240 and 241
• From a DNS server using A or AAAA records

An administrator is testing the connectivity for a new VLAN The devices in the VLAN are connected to a FortiSwitch device that is managed by FortiGate Quarantine is disabled on FortiGateWhile testing the administrator noticed that devices can ping FortiGate and FortiGate can ping the devices The administrator also noticed that inter-VLAN communication works However intra-VLANcommunication does not workWhich scenario is likely to cause this issue?

• Access VLAN is enabled on the VLAN
• The native VLAN configured on the ports is incorrect
• The FortiSwitch MAC address table is missing entries
• The FortiGate ARP table is missing entries

Which two pieces of information can the diagnose test authserver ldap command provide? (Choose two.)

• It displays whether the admin bind user credentials are correct
• It displays whether the user credentials are correct
• It displays the LDAP codes returned by the LDAP server
• It displays the LDAP groups found for the user

Which two statements about the MAC-based 802 1X security mode available on FortiSwitch are true? (Choose two.)

• FortiSwitch authenticates a single device and opens the port to other devices connected to the port
• FortiSwitch authenticates each device connected to the port
• It cannot be used in conjunction with MAC authentication bypass
• FortiSwitch can grant different access levels to each device connected to the port

What is the purpose of enabling Windows Active Directory Domain Authentication on FortiAuthenticator?

• It enables FortiAuthenticator to use Windows administrator credentials to perform an LDAP lookup for a user search
• It enables FortiAuthenticator to use a Windows CA certificate when authenticating RADIUS users
• It enables FortiAuthenticator to import users from Windows AD
• It enables FortiAuthenticator to register itself as a Windows trusted device to proxy authentication using Kerberos

Which two statements about FortiSwitch manager are true1? (Choose two)

• Per-device management is the default management mode on FortiManager
• FortiManager obtains the FortiSwitch status information by querying the FortiGate REST API every three minutes
• If the administrator makes any changes on FortiSwitch manager they must also install those changes on FortiGate so that those changes are applied on the managed switches
• Any switch discovered or authorized on FortiGate must be added manually on FortiSwitch manager

When you configure a FortiAP wireless interface for auto TX power control which statement describes how it configures its transmission power"?

• Every 30 seconds the AP will measure the signal strength of the AP using the client The AP will adjust its signal strength up or down until the AP signal is detected at -70 dBm
• Every 30 seconds FortiGate measures the signal strength of adjacent AP interfaces It will adjust its own AP power to match the adjacent AP signal strength
• Every 30 seconds FortiGate measures the signal strength of adjacent FortiAP interfaces It will adjust the adjacent AP power to be detectable at -70 dBm
• Every 30 seconds FortiGate measures the signal strength of the weakest associated client The AP will then configure its radio power to match the detected signal strength of the client