FCSS_LED_AR-7.6 practice questions 1–10

1. Question 1 · 61 in bank

   What is the primary benefit of the LAN Edge solution?

   • AIt integrates wired networking with advanced firewall capabilities.
   • BIt focuses on enhancing wireless network performance.
   • CIt provides centralized management, simplifies operations, and uses AI/ML.
   • DIt supports scalable and adaptable networking.

   Show answer

   Answer: C

   Next question

2. Question 2 · 61 in bank

   You need to optimize your wireless network to improve performance and reliability in a dynamic environment. The network must adapt to changes in the radio frequency (RF) environment, such as interference, new devices, and fluctuating traffic patterns. Which role does FortiAIOps play in monitoring and automatically adjusting to changes in the radio frequency (RF) environment?

   • ATo detect and report interference and congestion, helping to optimize wireless performance and coverage
   • BTo limit the number of devices connected to each access point in a given area
   • CTo increase the signal strength of the network if required by modulating power levels on all access points
   • DTo monitor network traffic and recommend firewall rules in real time

   Show answer

   Answer: A

   Next question

3. Question 3 · 61 in bank

   Refer to the exhibits.

   

   

   

   

   You are adding a new FortiSwitch to FortiGate for management. All necessary settings have been configured on FortiGate, but FortiSwitch remains offline. The cabling has been verified and is correctly connected. Which misconfiguration might be preventing FortiGate from detecting FortiSwitch?

   • AThe DHCP server setting vci-string is misconfigured.
   • BThe Fortilink interface has the wrong interface member.
   • CThe Fortilink interface setting ip-managed-by-fortiipam must be enabled.
   • DThe Fortilink interface setting type must be physical.

   Show answer

   Answer: A

   Next question

4. Question 4 · 61 in bank

   Refer to the exhibits.

   

   

   

   

   A FortiSwitch is successfully managed by FortiGate. FortiAP is connected to port1 of the managed FortiSwitch. On FortiGate, the VLAN AP is configured to detect and manage FortiAP, along with a DHCP server for the VLAN AP. Additionally, the VLAN AP is assigned to port1 of FortiSwitch. However, FortiGate is unable to detect or manage FortiAP. Which FortiGate misconfiguration is preventing the detection of FortiAP?

   • AThe VLAN is not tagged correctly on the FortiSwitch uplink port.
   • BThe FortiAP firmware is incompatible with the FortiGate firmware version.
   • CThe CAPWAP ports (UDP 5246 and 5247) are not open on FortiGate.
   • DSecurity Fabric is disabled in the administrative access options of the VLAN.

   Show answer

   Answer: D

   Next question

5. Question 5 · 61 in bank

   In public key infrastructure (PKI), what is the primary role of a certificate revocation list (CRL)?

   • ATo enable certificate authorities to update certificates with new public key information.
   • BTo list expired certificates and ensure they are not used for encryption.
   • CTo provide information about the revocation status of certificates in real time.
   • DTo maintain a list of certificates that have been revoked by the certificate authority (CA) before their expiration date.

   Show answer

   Answer: D

   Next question

6. Question 6 · 61 in bank

   Select 2

   A conference center wireless network provides guest access through a captive portal, allowing unregistered users to self-register and connect to the network. The IT team has been tasked with updating the existing configuration to enforce captive portal authentication over a secure HTTPS connection. Which two steps should the administrator take to implement this change? (Choose two.)

   • AEnable HTTP redirect in the user authentication settings.
   • BUpdate the captive portal URL to use HTTPS on FortiGate and FortiAuthenticator.
   • CCreate a new SSID with the HTTPS captive portal URL.
   • DDisable HTTP administrative access on the guest SSID to enforce HTTPS connection.

   Show answer

   Answer: AB

   Next question

7. Question 7 · 61 in bank

   Select 2

   You have decided to manage multiple FortiSwitch devices using FortiManager and its FortiSwitch Manager feature. Which two statements accurately describe FortiSwitch Manager feature functionality? (Choose two.)

   • AFortiSwitch Manager displays the following statuses for FortiSwitch: online, offline, unauthorized, and unknown.
   • BPer-device management is useful for deploying multiple switches with the same configuration.
   • CFortiSwitch Manager displays the following statuses for FortiSwitch: active, inactive, pending, and unknown.
   • DIn per-device management mode, you apply settings and profiles to individual FortiSwitch devices.

   Show answer

   Answer: AD

   Next question

8. Question 8 · 61 in bank

   Which two broad categories must be considered for wireless troubleshooting when evaluating key wireless metrics?

   • AWireless range and network speed
   • BSignal interface and device compatibility
   • CNetwork reliability and signal interference
   • DWireless health and wireless capacity

   Show answer

   Answer: D

   Next question

9. Question 9 · 61 in bank

   Refer to the exhibit.

   

   The exhibit shows an LDAP server configuration with the Username setting has been expanded to display its full content. The administrator has configured the LDAP settings on FortiGate and is troubleshooting for authentication issues. As part of the troubleshooting steps, the administrator runs the command dsquery user -samid student on the Windows Active Directory (AD) server with an IP address 10.0.1.10 and received the output CN=student, CN=Users, DC=trainingAD, DC=training, DC=lab. Based on the dsquery output, which LDAP setting on FortiGate is misconfigured?

   • AThe Common Name Identifier is incorrectly set, causing authentication failures.
   • BThe Bind Type is incorrectly configured, preventing FortiGate from connecting to the LDAP server.
   • CThe Distinguished Name setting is incorrectly configured, causing issues with user authentication.
   • DSever IP/Name is misconfigured so FortiGate can’t reach the LDAP server.

   Show answer

   Answer: C

   Next question

10. Question 10 · 61 in bank

    Refer to the exhibits.

    

    

    Examine the network diagram and packet capture shown in the exhibit. During packet capture analysis, a RADIUS Access-Request packet was detected being sent from FortiSwitch to FortiAuthenticator and passing through FortiGate. The capture shows that the User-Name attribute in the RADIUS Access-Request packet contains the client MAC address. Why is the client MAC address contained in the User-Name attribute of the RADIUS Access-Request packet?

    • AFortiAuthenticator is authenticating the client based on the device hostname.
    • BFortiAuthenticator is performing machine authentication
    • CMAC address-based authentication is being used for the client through MAC Authentication Bypass (MAB).
    • DFortiGate is authenticating the client using 802.1X authentication.

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

FCSS_LED_AR-7.6 practice, question 1. 61 questions available.