Fortinet NSE7_SAC-6.2 Exam Questions Instant Access

Question 1

What is the purpose of configuring the Windows Active Directory Domain Authentication feature?

AAllows FortiAuthentJcator to register itself as a Windows trusted device to proxy CHAP authentication using Kerberos.

BAllows FortiAuthenticator to use Windows administrator credentials to perform an LDAP lookup for a user search.

CAllows FortiAuthenticator to use a Windows CA certificate when authenticating RADIUS users.

DAllows FortiAuthenticator to authenticate users listed on Windows AD. Enables single sign-on services for VPN and wireless users.

Answer : D

https://docs.fortinet.com/document/fortiauthenticator/6.0.0/administration-guide/641286/remote-authentication-servers

Question 2

Refer to the exhibit.

In the WTP profile configuration shown in the exhibit, the AP profile is assigned to two FAP-320 APs that are installed in an open plan office

*The first AP has 32 clients associated to the 5GHz radios and 22 clients associated to the 2.4GHz radio.

*The second AP has 12 clients associated to the 5GHz radios and 20 clients associated to the 2.4GHz radio.

A dual band-capable client enters the office near the first AP and the first AP measures the new client at -33 dBm signal strength. The second AP measures the new client at - 4 3 dBm signal strength.

If the new client attempts to connect to the corporate wireless network, to which AP radio will the client be associated?

AThe second AP 5GHz interface.

BThe first AP 2.4GHz interface.

CThe first AP 5GHz interface.

DThe second AP 2.4GHz interface.

Answer : A

Question 3

Which CLI command should an administrator use to view the certificate validation process in real-time?

Adiagnose debug application certd -1

Bdiagnose debug application fnbamd -1

Cdiagnose debug application authd -1

Ddiagnose debug application foauthd -1

Answer : B

Question 4

An administrator has deployed dual band-capable wireless APs in a wireless network. Multiple 2.4 GHz wireless clients are connecting to the network, and subsequent monitoring shows that individual AP 2.4GHz interfaces are being overloaded with wireless connections.

Which configuration change would best resolve the overloading issue?

AConfigure load balancing AP handoff on both the AP interfaces on all APs.

BConfigure load balancing AP handoff on only the 2.4GHz interfaces of all Aps.

CConfigure load balancing frequency handoff on both the AP interfaces.

DConfigure a client limit on the all AP 2.4GHz interfaces.

Answer : C

Question 5

Refer to the exhibit.

Examine the VAP configuration and the WiFi zones table shown in the exhibits.

Which two statements describe FortiGate behavior regarding assignment of

AFortiGate will load balance clients using VLAN 101 and VLAN 102 and assign them an IP address from the 10.0.3.0/24 subnet.

BClients connecting to APs in the Floor l group will notbe able to receive an IP address.

CAll clients connecting to the Corp SSID will receive an IP address from the 10.0.3.1/24 subnet.

DClients connecting to APs in the office group will be assigned an IP address from the 10.0.20.1/24 subnet.

Answer : B, D

Question 6

Refer to the exhibit.

Given the network topology shown in the exhibit, which two ports should be configured as untrusted DHCP ports? (Choose two.)

AFortiSwitch B, port1

BFortiSwitch A, port2

CFortiSwitch B, port2

DFortiSwitch A, port1

Answer : C, D

Question 7

Refer to the exhibit.

Examine the partial debug output shown in the exhibit.

Which two statements about the debug output are true? (Choose two.)

AThe connection to the LDAP server timed out.

BThe user authenticated successfully.

CThe LDAP server is configured to use regular bind.

DThe debug output shows multiple user authentications.

Answer : B, C

Fortinet NSE 7 - Secure Access 6.2 NSE7_SAC-6.2 Exam Questions