NSE7_LED-7.0 試験問題を無料オンラインアクセス

Refer to the exhibit

Examine the FortiGate RSSO configuration shown in the exhibit
FortiGate is configured to receive RADIUS accounting messages on port3 to authenticate RSSO users The users are located behind port3 and the internet link is connected to port1 FortiGate is processing incoming RADIUS accounting messages successfully and RSSO users are getting associated with the RSSO Group user group However all the users are able to access the internet, and the administrator wants to restrict internet access to RSSO users only Which configuration change should the administrator make to fix the problem?

• A.Add RSSO Group to the firewall policy
• B.Enable Security Fabric Connection on port3
• C.Change the RADIUS Attribute Value selling to match the name of the RADIUS attribute containing the group membership information of the RSSO users
• D.Create a second firewall policy from port3 lo port1 and select the target destination subnets

Refer to the exhibit.

Examine the FortiManager configuration and FortiGate CLI output shown in the exhibit An administrator is testing the NAC feature The test device is connected to a managed FortiSwitch device
{S224EPTF19"53€7)onport2
After applying the NAC policy on port2 and generating traffic on the test device the test device is not matching the NAC policy therefore the test device remains m the onboarding VLAN Based on the information shown in the exhibit which two scenarios are likely to cause this issue? (Choose two.)

• A.The MAC address configured on the NAC policy is incorrect
• B.Management communication between FortiGate and FortiSwitch is down
• C.Device detection is not enabled on VLAN 4089
• D.The device operating system detected by FortiGate is not Linux

Which two statements about MAC address quarantine by redirect mode are true? (Choose two)

• A.The device MAC address is added to the Quarantined Devices firewall address group
• B.The quarantined device is kept in the current VLAN
• C.The quarantined device is moved to the quarantine VLAN
• D.It is the default mode for MAC address quarantine

Refer to the exhibit.

Examine the LDAP server configuration shown in the exhibit Note that the Username setting has been expanded to display Its full content On the Windows AD server 10.0.1.10, the administrator used dsquery. which returned the following output:

According to the output which FortiGate LDAP setting is configured incorrectly''

• A.Common Name Identifier
• B.Username
• C.Distinguished Name
• D.Bind Type

Which two pieces of information can the diagnose test authserver ldap command provide? (Choose two.)

• A.It displays whether the user credentials are correct
• B.It displays the LDAP groups found for the user
• C.It displays the LDAP codes returned by the LDAP server
• D.It displays whether the admin bind user credentials are correct