Fortinet NSE 7 - LAN Edge 7.0 : NSE7_LED-7.0 valid dump

Exhibit.

Exhibit.

Refer to the exhibits
In the wireless configuration shown in the exhibits, an AP is deployed in a remote site and has a wireless network (VAP) called Corporate deployed to it The network is a tunneled network however clients connecting to a wireless network require access to a local printer Clients are trying to print to a printer on the remote site but are unable to do so Which configuration change is required to allow clients connected to the Corporate SSID to print locally?

• A. Configure split-tunneling in the vap configuration
• B. Configure split-tunneling in the wtp-profile configuration
• C. Disable the Block Intra-SSID Traffic (intra-vap-privacy) setting on the SSID (VAP) profile
• D. Configure the printer as a wireless client on the Corporate wireless network

Refer to the exhibit.
Examine the FortiGate logs, widget, and CLI output shown in the exhibit.

An administrator is testing the Security Fabric quarantine automation. The test device (10.0.2.2) is connected to a managed FortiSwitch device.
A few seconds after trying to access a malicious website from the test device, the test device can no longer access the internet and other VLANs in the network. However, the device is still able to access other devices in the same VLAN.
Based on the information shown in the exhibit, which modification should the administrator make to fix the problem?

• A. Change the quarantine mode to by redirect mode.
• B. Change the quarantine mode to by VLAN mode.
• C. Configure a firewall policy on FortiGate to block the intra-VLAN traffic.
• D. Enable the access layer quarantine action on the Quarantine_Devices automation stitch.

Refer to the exhibits.

Examine the VAP configuration and the Wi-Fi zones table shown in the exhibits.

Which two statements describe the FortiGate behavior regarding assignment of VLANs to wireless clients?
(Choose two.)

• A. Clients connecting to APs in the Floor group will not be able to receive an IP address.
• B. Clients connecting to APs in the Office group will be assigned to VLAN 102.
• C. All clients connecting to the Corp SSID will receive an IP address from the 10.0.3.1/24 subnet.
• D. FortiGate will load balance clients using VLAN 101 and VLAN 102 and assign them an IP address from the 10.0.3.0/24 subnet.

Refer to the exhibits.

Firewall Policy

Examine the firewall policy configuration and SSID settings
An administrator has configured a guest wireless network on FortiGate using the external captive portal The administrator has verified that the external captive portal URL is correct However wireless users are not able to see the captive portal login page Given the configuration shown in the exhibit and the SSID settings which configuration change should the administrator make to fix the problem?

• A. Apply a guest.portal user group in the firewall policy with the ID 11.
• B. Disable the user group from the SSID configuration
• C. Enable the captivs-portal-exempt option in the firewall policy with the ID 11.
• D. Include the wireless client subnet range in the Exempt Source section

Refer to the exhibit.
Examine the FortiGate RSSO configuration shown in the exhibit.

FortiGate is configured to receive RADIUS accounting messages on port3 to authenticate RSSO users. The incoming RADIUS accounting messages contain the username and group membership information in the User-Name and Class RADIUS attributes, respectively.
Which three settings must you configure onFortiGate to successfully authenticate RSSO users and matchthem to the existing RSSO user groups? (Choose three)

• A. Device detection and Security Fabric Connection should be enabled on port3.
• B. The rasc-endpoint-attribute CLI setting in the RSSO agent configuration should be set to User-Name.
• C. The sso-attribute CLI setting in the RSSO agent configuration should be set to Class.
• D. The RADIUS Attribute Value setting configured for an RSSO user group should match the Class RADIUS attribute value in the RADIUS accounting message.
• E. RSSO user groups should be assigned to all firewall policies.