Online Access Free NSE7_SAC-6.2 Exam Questions

Which step can be taken to ensure that only FortiAP devices receive IP addresses from a DHCP server on FortiGate?

• A.Create a reservation list in the DHCP server settings.
• B.Change the interface addressing mode toFortiAP devices.
• C.Configure a VCI string value of FortiAP in the DHCP server settings.
• D.Use DHCP option 138 to assign IPs to FortiAP devices.

Refer to the exhibit showing certificate values.

Wireless guest users are unable to authenticate because they are getting a certificate error while loading the captive portal login page This URL string is the HTTPS POST URL guest wireless users see when attempting to access the network using the web browser:

Which two settings are the likely causes of the issue? (Choose two.)

• A.The external server FQDN is incorrect.
• B.The user address is not in DDNS form.
• C.The FortiGate authentication interface address is using Hi IPS.
• D.The wireless user's browser is missing a CA certificate.

Which CLI command should an administrator use to view the certificate validation process in real-time?

• A.diagnose debug application foauthd -1
• B.diagnose debug application certd -1
• C.diagnose debug application fnbamd -1
• D.diagnose debug application authd -1

Refer to the exhibits.

Examine the firewall policy configuration and SSID settings.
An administrator has configured a guest wireless network on FortiGate using the external captiveportal. The administrator has verified that the external captive portal URL is correct. However, wireless users are not able to see the captive portal login page.
Given the configuration shown in the exhibit and the SSID settings, which configuration change should the administrator make to fix the problem?

• A.Include the wireless client subnet range in the Exempt Source section.
• B.Disable the user group from the SSID configuration.
• C.Apply a guest.portal user group in the firewall policy with the ID 11.
• D.Enable the caprive-por-al-exempt option in the firewall policy with the ID 11.