Fortinet NSE 7 - Secure Access 6.2 認定 NSE7_SAC-6.2 試験問題:

1. A wireless network in a school provides guest accessusing a captive portal to allow unregistered users to self-register and access the network. The administrator is requested to update the existing configuration to provide captive portal authentication through a secure connection (HTTPS) to protect and encrypt guest user credentials after they receive the login information when registered for the first time.
Which two changes must the administrator make to enforce HTTPS authentication? (Choose two.)

A) Update the captive portal URL to use HTTPS on FortiGate and FortiAuthenticator
B) Enable Redirect HTTP Challenge to a Secure Channel (HTTPS) in the user authentication settings
C) Create a new SSID with the HTTPS captive portal URL
D) Provide instructions to users to use HTTPS to access the network

2. Refer to the exhibit.
Examine the configuration of the FortiSwitch security policy profile.

If the security profile shown in the exhibit isassigned on the FortiSwitch port for 802 1X. port authentication, which statement is correct?

A) Host machines that do not support 802.1X authentication will be assigned the guest VLAN.
B) All unauthenticated users will be assigned the auth-fail VLAN.
C) Authenticated users that are part of the wired-users group will be assigned the guest VLAN.
D) Host machines that do support 802.1X authentication, but have failed authentication, will be assigned the guest VLAN.

3. A FotliGate has the following LDAP configuration

On the Windows LDAP server 10.0.1.10, the administrator used dsqueryT which returned the following output:
>dsquery user -samid admin* "CN=AdministratorrCN=UsersiDC=trainingAD;DC=trainingiDC=lab" According to the output, which FortiGate LDAP setting is configured incorrectly?

A) dn
B) cnid
C) sAMAccountName
D) username

質問と回答：