Fortinet NSE 7 - LAN Edge 7.0 - NSE7_LED-7.0 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Refer to the exhibit.

Examine the FortiSwitch port configuration and the FortiGate interface configuration shown in the exhibit.

Based on the configuration shown in the exhibit, which two statements about how port2 handles tagged and untagged traffic are true? (Choose two.)

A. Port2 accepts ingress tagged traffic for VLAN IDs 4091 and 4093 only. B. Port2 accepts ingress untagged traffic for VLAN IDs 10, 4091, and 4093 only. C. Port2 assigns ingress untagged traffic to VLAN 10. D. Port2 tags egress traffic for VLAN 10.

Discussion 0

Correct Answer: B,C Vote an answer

Question 2

Which two statements about FortiSwitch manager are true1? (Choose two)

A. FortiManager obtains the FortiSwitch status information by querying the FortiGate REST API every three minutes B. Per-device management is the default management mode on FortiManager C. If the administrator makes any changes on FortiSwitch manager they must also install those changes on FortiGate so that those changes are applied on the managed switches D. Any switch discovered or authorized on FortiGate must be added manually on FortiSwitch manager

Discussion 0

Correct Answer: A,C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

When you configure a FortiAP wireless interface for auto TX power control which statement describes how it configures its transmission power"?

A. Every 30 seconds FortiGate measures the signal strength of adjacent FortiAP interfaces It will adjust the adjacent AP power to be detectable at -70 dBm B. Every 30 seconds FortiGate measures the signal strength of the weakest associated client The AP will then configure its radio power to match the detected signal strength of the client C. Every 30 seconds the AP will measure the signal strength of the AP using the client The AP will adjust its signal strength up or down until the AP signal is detected at -70 dBm D. Every 30 seconds FortiGate measures the signal strength of adjacent AP interfaces It will adjust its own AP power to match the adjacent AP signal strength

Discussion 0

Correct Answer: A Vote an answer

Question 4

An administrator has deployed multiple dual-band wireless APs in a wireless network. APs are installed at measured distances to ensure fast roaming for the clients. Multiple 2.4 GHz-only wireless clients are connecting to the network, and subsequent monitoring shows that individual AP 2.4 GHz interfaces are being overloaded with wireless connections.
Which configuration change would best resolve the overloading issue?

A. Configure load balancing frequency handoff on both AP interfaces. B. Configure a client limit on all AP 2.4 GHz interfaces. C. Configure load balancing AP handoff on both AP interfaces on all Aps. D. Configure load balancing AP handoff on only the 2.4 GHz interfaces of all APs.

Discussion 0

Correct Answer: B Vote an answer

Question 5

Where can FortiGate learn the FortiManager IP address or FQDN for zero-touch provisioning'?

A. From a DNS server using A or AAAA records B. From a DHCP server using options 240 and 241 C. From an LDAP server using a simple bind operation D. From a TFTP server

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 6

A wireless network in a school provides guest access using a captive portal to allow unregistered users to self- register and access the network The administrator is requested to update the existing configuration to provide captive portal authentication through a secure connection (HTTPS) Which two changes must the administrator make to enforce HTTPS authentication"? (Choose two >

A. Disable HTTP administrative access on the guest SSID to enforce HTTPS connection B. Create a new SSID with the HTTPS captive portal URL C. Enable HTTP redirect in the user authentication settings D. Update the captive portal URL to use HTTPS on FortiGate and FortiAuthenticator

Discussion 0

Correct Answer: C,D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 7

Refer to the exhibit.

Examine the IPsec VPN phase 1 configuration shown in the exhibit
An administrator wants to use certificate-based authentication for an IPsec VPN user Which three configuration changes must you make on FortiGate to perform certificate-based authentication for the IPsec VPN user? (Choose three)

A. Create a PKI user for the IPsec VPN user, and then configure the IPsec VPN tunnel to accept the PKI user as peer certificate. B. In the IKE section of the IPsec VPN tunnel, in the Mode field, select Main (ID protection). C. In the Authentication section of the IPsec VPN tunnel, in the Method drop-down list, select Signature, and then select the certificate that FortiGate will use for IPsec VPN. D. Import the CA that signed the user certificate. E. Enable XAUTH on the IPsec VPN tunnel.

Discussion 0

Correct Answer: C,D,E Vote an answer