NSE7_LED-7.0 試験問題を無料オンラインアクセス

Refer to the exhibits.

In the WTP profile configuration shown in the exhibit, the AP profile is assigned to two FAP-320 APs that are installed in an open plan office.

The first AP has 32 clients associated with the 5 GHz radios and 22 clients associated with the 2.4 GHz radio.
The second AP has 12 clients associated with the 5 GHz radios and 20 clients associated with the 2.4 GHz radio.
A dual-band-capable client enters the office near the first AP and the first AP measures the new client at -33 dBm signal strength. The second AP measures the new client at 2 -43 dBm signal strength.
If the new client attempts to connect to the corporate wireless network, with which AP radio will the client be associated?

• A.The first AP 2.4 GHz interface.
• B.The first AP 5 GHz interface.
• C.The second AP 2.4 GHz interface.
• D.The second AP 5 GHz interface.

Refer to the exhibits showing AP monitoring information.

The exhibits show the status of an AP in a small office building. The building is located at the edge of a campus, and users are reporting issues with wireless network performance.

Which configuration change would best improve the wireless network performance?

• A.Select an alternative channel for the 5 GHz interface.
• B.Enable band steering on the AP.
• C.Relocate the AP to be closer to the clients.
• D.Disable lower data rates on the 5 GHz interface.

Refer to the exhibit.

Examine the IPsec VPN phase 1 configuration shown in the exhibit
An administrator wants to use certificate-based authentication for an IPsec VPN user Which three configuration changes must you make on FortiGate to perform certificate-based authentication for the IPsec VPN user? (Choose three)

• A.Create a PKI user for the IPsec VPN user, and then configure the IPsec VPN tunnel to accept the PKI user as peer certificate.
• B.In the Authentication section of the IPsec VPN tunnel, in the Method drop-down list, select Signature, and then select the certificate that FortiGate will use for IPsec VPN.
• C.Import the CA that signed the user certificate.
• D.Enable XAUTH on the IPsec VPN tunnel.
• E.In the IKE section of the IPsec VPN tunnel, in the Mode field, select Main (ID protection).

Wireless guest users are unable to authenticate because they are getting a certificate error while loading the captive portal login page. This URL string is the HTTPS POST URL guest wireless users see when attempting to access the network using the web browser

Which two settings are the likely causes of the issue? (Choose two.)

• A.The FortiGate authentication interface address is using HTTPS
• B.The external server FQDN is incorrect
• C.The wireless user's browser is missing a CA certificate
• D.The user address is not in DDNS form

Exhibit.

Refer to the exhibit showing a network topology and SSID settings.
FortiGate is configured to use an external captive portal However wireless users are not able to see the captive portal login page Which configuration change should the administrator make to fix the problem?

• A.Enable NAT in the firewall policy with the ID 13.
• B.Remove the guest.portal user group in the firewall policy with the ID 12
• C.Enable the captive-portal-exempt option in the firewall policy with the ID 12
• D.Add the FortiAuthenticator and WindowsAD address objects as exempt destinations services