Exam FCSS_LED_AR-7.6 Topic 2 Question 16 Discussion

Actual exam question for Fortinet's FCSS_LED_AR-7.6 exam
Question #: 16
Topic #: 2
Refer to the exhibit.


A RADIUS server has been successfully configured on FortiGate, which sends RADIUS authentication requests to FortiAuthenticator. FortiAuthenticator, in turn, relays the authentication using LDAP to a Windows Active Directory server.
It was reported that wireless users are unable to authenticate successfully.
The FortiGate configuration confirms that it can connect to the RADIUS server without issues.
While testing authentication on FortiGate using the command diagnose test authserver radius, it was observed that authentication succeeds with PAP but fails with MSCHAPv2.
Additionally, the Remote LDAP Server configuration on FortiAuthenticator was reviewed.
Which configuration change might resolve this issue?

Suggested Answer: B Vote an answer

MSCHAPv2 cannot be validated through a standard LDAP bind to Active Directory because it requires challenge-response processing. Enabling Windows Active Directory Domain Authentication allows FortiAuthenticator to validate MSCHAPv2 properly against AD, which can resolve the wireless user authentication failure.

by Levi at Oct 14, 2026, 11:31 AM

Limited Time Offer

15%

Off

Get Premium FCSS_LED_AR-7.6 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10