Online Access Free NSE7_LED-7.0 Exam Questions

An administrator is deploying AP's that are connecting over an IPsec network. All APs have been configured to connect to FortiGate manually. FortiGate can discover the APs and authorize them. However, FortiGate is unable to establish CAPWAP tunnels to manage the APs.
Which configuration setting can the administrator perform to resolve the problem?

• A.Upgrade the FortiAP firmware image to ensure compatibility with the FortiOS version.
• B.Assign a custom AP profile for the remote APs with the set mpls-connection option enabled.
• C.Decrease the CAPWAP tunnel MTU size for APs to prevent fragmentation.
• D.Enable CAPWAP administrative access on the IPsec interface.

Refer to the exhibits.

Firewall Policy

Examine the firewall policy configuration and SSID settings
An administrator has configured a guest wireless network on FortiGate using the external captive portal The administrator has verified that the external captive portal URL is correct However wireless users are not able to see the captive portal login page Given the configuration shown in the exhibit and the SSID settings which configuration change should the administrator make to fix the problem?

• A.Enable the captivs-portal-exempt option in the firewall policy with the ID 11.
• B.Include the wireless client subnet range in the Exempt Source section
• C.Disable the user group from the SSID configuration
• D.Apply a guest.portal user group in the firewall policy with the ID 11.

When you configure a FortiAP wireless interface for auto TX power control which statement describes how it configures its transmission power"?

• A.Every 30 seconds the AP will measure the signal strength of the AP using the client The AP will adjust its signal strength up or down until the AP signal is detected at -70 dBm
• B.Every 30 seconds FortiGate measures the signal strength of adjacent AP interfaces It will adjust its own AP power to match the adjacent AP signal strength
• C.Every 30 seconds FortiGate measures the signal strength of the weakest associated client The AP will then configure its radio power to match the detected signal strength of the client
• D.Every 30 seconds FortiGate measures the signal strength of adjacent FortiAP interfaces It will adjust the adjacent AP power to be detectable at -70 dBm

Which two statements about the guest portal on FortiAuthenticator are true? (Choose two.)

• A.Administrators can use one or more incoming parameters to configure a mapping rule for the guest portal
• B.Administrators must approve all guest accounts before they can be used
• C.The guest portal provides pre and post-log in services
• D.Each remote user on FortiAuthenticator can sponsor up to 10 guest accounts

To troubleshoot configuration push issues on a managed FortiSwitch, which FortiGate process should an administrator enable debug for?

• A.httpsd
• B.cu_acd
• C.flcfgd
• D.fortilinkd