최신 NSE7_LED-7.0 무료덤프 - Fortinet NSE 7

문제1

Refer to the exhibit. Examine the FortiSwitch security policy shown in the exhibit. If the security profile shown in the exhibit is assigned to all ports on a FortiSwitch device for 802.1X authentication, which statement about the switch is correct?

A. FortiSwitch will assign non-802.1X devices to the onboarding VLAN

B. FortiSwitch will try to authenticate non-802.1X devices using the device MAC address as the username and password

C. FortiSwitch cannot authenticate multiple devices connected to the same port

D. All EAP messages will be terminated on FortiSwitch

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제2

Refer to the exhibit. By default, FortiOS creates the following DHCP server scope for the FortiLink interface as shown in the exhibit.
What is the objective of the vci-string setting?

A. To ignore DHCP requests coming from FortiSwitch and FortiExtender devices

B. To restrict the IP address assignment to devices that have FortiSwitch or FortiExtender as their hostname

C. To restrict the IP address assignment to FortiSwitch and FortiExtender devices

D. To reserve IP addresses for FortiSwitch and FortiExtender devices

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제3

Refer to the exhibit. Examine the IPsec VPN phase 1 configuration shown in the exhibit. An administrator wants to use certificate-based authentication for an IPsec VPN user.
Which three configuration changes must you make on FortiGate to perform certificate-based authentication for the IPsec VPN user? (Choose three)

A. Enable XAUTH on the IPsec VPN tunnel

B. In the IKE section of the IPsec VPN tunnel in the Mode field select Main (ID protection)

C. Create a PKI user for the IPsec VPN user, and then configure the IPsec VPN tunnel to accept the PKI user as peer certificate

D. In the Authentication section of the IPsec VPN tunnel in the Method drop-down list select Signature and then select the certificate that FortiGate will use for IPsec VPN

E. Import the CA that signed the user certificate

정답: C,D,E

문제4

You are configuring a FortiGate wireless network to support automated wireless client quarantine using IOC. Which two configurations must you put in place for a wireless client to be quarantined successfully? (Choose two)

A. Configure the wireless network to be in tunnel mode

B. Configure the FortiGate device in the Security Fabric with a FortiAnalyzer device

C. Configure a firewall policy to allow communication

D. Configure the wireless network to be in bridge mode

정답: A,B

설명: (DumpTOP 회원만 볼 수 있음)

최신 NSE7_LED-7.0 무료덤프 - Fortinet NSE 7 - LAN Edge 7.0

우리와 연락하기

유용한 링크

최신 업데이트