Online Access Free NSE7_SAC-6.2 Exam Questions

Refer to the exhibit.

A host machine connected toport2 on ForitSwitch cannot connect to the network. All ports on FortiSwitch are assigned a security policy to enforce 802.1X port authentication. While troubleshooting the issue, the administrator runs the debug command and obtains the output shown in theexhibit.
Which two scenarios are the likely cause of this issue? (Choose two.)

• A.The host machine is quarantined due to a security incident.
• B.The host machine is not configured for 802.1X port authentication.
• C.The host machine does not support 802.1X authentication
• D.The host machine is configured with wrong VLAN ID.

Examine the following RADIUSconfiguration:

An administrator has configured a RADIUS server on FortiGate that points to FortiAuthenticator.
FortiAuthenticator is acting as an authentication proxy and is configured to relay all authentication requests to a remote Windows ADserver using LDAP.
While testing the configuration, the administrator notices that the diagnose test authserver command works with PAP, however, authentication requests fail when using MSCHAPv2.
Which two changes should the administrator make to get MSCHAPv2 to work? (Choose two.)

• A.Force FortiGate to use the PAP authentication method in the RADIUS server configuration.
• B.EnableWindows Active Directory Domain Authentication on FortiAuthenticator to add FortiAuthenticator to the Windows domain
• C.Change the remote authentication server from LDAP to RADIUS on FortiAuthenticator.
• D.Use MSCHAP instead of using MSCHAPv2.

Refer to the exhibit.

The exhibit shows two FortiGate devices in active-passive HA mode, including four FortiSwitch devices connected to a ring.
Which two configurations are required to deploy this network topology'' (Choose two.)

• A.Enable STP on the FortiGate interfaces.
• B.Configure the trunk interfaces on the FortiSwitch devicesas MCLAG-ISL.
• C.Configure link aggregation interfaces on the FortiLink interfaces.
• D.Enable f ortilink-split-interf ace on the FortiLink interfaces.

Examine the sections of the configuration shown in the following output;

What action will the FortiGate take when using OCSP certificate validation?

• A.FortiGate will use the OCSP server 10.0.1.150 even when there is a different OCSP IP address in theocsp-override-server option under config user peer.
• B.FortiGate will use the OCSP server 10.0.1.150 even when the OCSP URL field in the user certificate contains a different OCSP server IP address.
• C.FortiGate will invalidate the certificate if the OSCP server is unavailable.
• D.FortiGate will reject the certificate if the OCSP server replies that the certificate is unknown.