NSE7_SAC-6.2 Exam Training Practice Tests (Fortinet NSE 7

Question 1

Which statement correctly describes the guest portal behavior on FortiAuthenticator?

A. All guest accounts must be activated using SMS or email activation codes. B. FortiAuthenticator uses POST parameters and a RADIUS client configuration to map the request to a guest portal for authentication. C. All self-registered and sponsored accounts are listed on the local Users GUI page on FortiAuthenticator. D. Sponsored accounts cannot authenticate using guest portals.

Correct Answer: D

Question 2

802.1X port authentication is enabled on only those ports that the FortiSwitch security policy is assigned to.
Whichconfigurable items are available when you configure the security policy on FortiSwitch? (Choose two.)

A. Default guest group B. FSSO groups C. User groups D. Security mode

Correct Answer: C,D

Question 3

Refer to the exhibit.

The exhibit shows a network topology and SSID settings.
FortiGate is configured to use an external captive portal. However, wireless users are not able to see the captive portal login page.
Which configuration change should the administrator make to fix the problem?

A. Remove guest.portal user group in the firewall policy. B. Create a firewall policy to allow traffic from the Guest SSID to FortiAuthenticator and Windows AD devices. C. Enable the captive-portal-exempt option in the firewall policy with the ID 10. D. FortiAuthenticator and WindowsAD address objects should be added as exempt sources.

Correct Answer: C

Fortinet NSE 7 - Secure Access 6.2 - NSE7_SAC-6.2 Exam Practice Test