Fortinet NSE 7 - Secure Access 6.2 - NSE7

Question 1

802.1X port authentication is enabled on only those ports that the FortiSwitch security policy is assigned to.
Whichconfigurable items are available when you configure the security policy on FortiSwitch? (Choose two.)

A. FSSO groups

B. Default guest group

C. Security mode

D. User groups

Correct Answer: C,D

Question 2

A wireless network in a school provides guest accessusing a captive portal to allow unregistered users to self-register and access the network. The administrator is requested to update the existing configuration to provide captive portal authentication through a secure connection (HTTPS) to protect and encrypt guest user credentials after they receive the login information when registered for the first time.
Which two changes must the administrator make to enforce HTTPS authentication? (Choose two.)

A. Update the captive portal URL to use HTTPS on FortiGate and FortiAuthenticator

B. Enable Redirect HTTP Challenge to a Secure Channel (HTTPS) in the user authentication settings

C. Provide instructions to users to use HTTPS to access the network

D. Create a new SSID with the HTTPS captive portal URL

Correct Answer: A,D

Question 3

What is the purpose of configuring the Windows Active Directory Domain Authentication feature?

A. Allows FortiAuthenticator to authenticate users listed on Windows AD.Enables single sign-on services for VPN and wireless users.

B. Allows FortiAuthentJcator to register itself as a Windows trusted device to proxy CHAP authentication using Kerberos.

C. Allows FortiAuthenticator touse Windows administrator credentials to perform an LDAP lookup for a user search.

D. Allows FortiAuthenticator to use a Windows CA certificate when authenticating RADIUS users.

Correct Answer: A

Fortinet NSE 7 - Secure Access 6.2 - NSE7_SAC-6.2 Exam Practice Test

Latest Update

Useful Links

Contact Us