FCSS - LAN Edge 7.6 Architect - FCSS_LED

Question 1

An administrator is reviewing FortiSwitch trunk configurations.
Which two statements accurately describe the functionality of FortiSwitch trunks? (Choose two.)

A. FortiSwitch connecting to FortiGate uses the Fortinet Discovery Protocol (FDP) to automatically form a trunk.

B. FortiSwitch uses trunk to refer to a LAG interface.

C. FortiSwitch trunks can only connect to other FortiSwitch devices and not to a FortiGate.

D. FortiSwitch connecting to the FortiGate FortiLink interface automatically forms a trunk.

Correct Answer: B,D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

A network administrator connects a new FortiGate to the network, allowing it to automatically discover andI register with FortiManager. What occurs after FortiGate retrieves the FortiManager address?

A. FortiGate establishes a secure tunnel to FortiManager over TCP port 541.

B. The device needs to be manually authorized on FortiManager.

C. FortiGate sends a discovery request to all devices on the local network using UDP port 1068.

D. FortiGate configures its interface settings based on a DHCP response from FortiManager.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

Refer to the exhibit.

You've configured the FortiLink interface, and the DHCP server is enabled by default. The resulting DHCP server settings are shown in the exhibit.
What is the role of the vci-string setting in this configuration?

A. To reserve IP addresses for FortiSwitch and FortiExtender devices.

B. To restrict the IP address assignment to devices that have FortiSwitch or FortiExtender as their hostname.

C. To ignore DHCP requests coming from FortiSwitch and FortiExtender devices.

D. To connect, devices must match the VCI string; otherwise, they will not receive an IP address.

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

Refer to the exhibits. The exhibits show the FortiGate logs, widget, and CLI.

Security Fabric quarantine automation is being tested using a device with the IP address
10.0.2.1, which is connected to a managed FortiSwitch.
Shortly after attempting to access a malicious website, the device loses access to the internet and other VLANs within the network. However, it can still communicate with other devices within the same VLAN.
Which configuration change is required to fix the issue?

A. Adjust the indicator of compromise (IOC) on FortiAnalyzer.

B. Enable intra-VLAN traffic blocking In the Security Fabric quarantine settings.

C. Adjust the IP Ban settings to the Quarantine action.

D. Replace the IP Ban action with Access Layer Quarantine.

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

How does Syslog SSO on FortiAuthenticator establish user identity?

A. By directly communicating with the domain controller to retrieve user login events

B. By intercepting and decrypting network traffic to extract user credentials

C. By parsing syslog messages from network devices to extract user login events and associate them with IP addresses

D. By using predefined user credentials stored on ForitAuthenticator

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

Refer to the exhibits.

Examine the FortiGate RSSO configuration shown in the exhibit.
FortiGate is set up to use RSSO for user authentication. It is currently receiving RADIUS accounting messages through port3. The incoming RADIUS accounting messages contain the username in the User-Name attribute and group membership in the Class attribute. You must ensure that the users are authenticated through these RADIUS accounting messages and accurately mapped to their respective RSSO user groups.
Which three critical configurations must you implement on the FortiGate device? (Choose three.)

A. RSSO user groups should be assigned to all firewall policies.

B. Device detection and Security Fabric Connection should be enabled on port3

C. The RADIUS Attribute Value setting configured for an RSSO user group should match the class RADIUS attribute value in the RADIUS accounting message.

D. The rsso-endpoint-attribute CLI setting in the RSSO agent configuration should be set to User- Name.

E. The sso-attribute CLI setting in the RSSO agent configuration should be set to Class.

Correct Answer: C,D,E

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

Refer to the exhibits.

The exhibits show the WTP profile and VAP CLI configurations on FortiGate managing a remote AP.
The AP is designed to grant a remote employee access to company network resources, including the database and AD servers. The employee can reach company resources but is unable to access a local printer at home.
What two solutions are required to fix this issue? (Choose two.)

A. Configure the S231F wtp-profile to add a split tunneling ACL with a destination subnet of
192.168.1.1/24,using the command set dest-ip 192.168.1.1/24

B. Configure the EmployeeHome VAP profile for local bridging using the command set local- bridging enable.

C. Configure the S231F wtp profile to enable split tunneling to the AP subnet using the command set split-tunneling-acl-local-ap-subnet enable.

D. Configure the EmployeeHome VAP profile to disable host isolation using the command set intra-vap-privacy disable.

Correct Answer: A,C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 8

How can FortiAIOps help optimize network performance in an SD-Branch deployment with FortiGate, FortiSwitch, and FortiAP?

A. It uses AI-driven analytics to identify network issues and provide optimization recommendations.

B. It removes the need for SD-WAN configuration by automating all routing decisions.

C. It predicts and resolves all network issues without any human intervention.

D. It disables low-performing APs and switches automatically.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 9

Which encryption protocols can CAPWAP use to secure the data channel when communicating between a FortiGate wireless controller and FortiAP?

A. WPA3 and TLS

B. SSL/TLS and IPsec

C. DTLS and IPsec

D. SSH and SSL

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Fortinet FCSS - LAN Edge 7.6 Architect - FCSS_LED_AR-7.6 Exam Practice Test

Latest Update

Useful Links

Contact Us