NSE7_SAC-6.2 Exam Questions To Pass Fortinet NSE 7 – Secure Access 6.2

1. Which step can be taken to ensure that only FortiAP devices receive IP addresses from a DHCP server on FortiGate?

2. Refer to the exhibit.

In the WTP profile configuration shown in the exhibit, the AP profile is assigned to two FAP-320 APs that are installed in an open plan office.

– The first AP has 32 clients associated to the 5GHz radios and 22 clients associated to the 2.4GHz radio.

– The second AP has 12 clients associated to the 5GHz radios and 20 clients associated to the 2.4GHz radio.

A dual band-capable client enters the office near the first AP and the first AP measures the new client at −33 dBm signal strength. The second AP measures the new client at −43 dBm signal strength.

In the new client attempts to connect to the corporate wireless network, to which AP radio will the client be associated?

3. Which two EAP methods can use MSCHAPV2 for client authentication? (Choose two.)

4. Which two statements about the use of digital certificates are true? (Choose two.)

5. 802.1X port authentication is enabled on only those ports that the FortiSwitch security policy is assigned to.

Which configurable items are available when you configure the security policy on FortiSwitch? (Choose two.)

6. A wireless network in a school provides guest access using a captive portal to allow unregistered users to self-register and access the network. The administrator is requested to update the existing configuration to provide captive portal authentication through a secure connection (HTTPS) to protect and encrypt guest user credentials after they receive the login information when registered for the first time.

Which two changes must the administrator make to enforce HTTPS authentication? (Choose two.)

7. An administrator is deploying APs that are connecting over an IPsec network. All APs have been configured to connect to FortiGate manually. FortiGate can discover the APs and authorize them. However, FortiGate is unable to establish CAPWAP tunnels to manage the APs.

Which configuration setting can the administrator perform to resolve the problem?

8. What action does FortiSwitch take when it receives a loop guard data packet (LGDP) that was sent by itself?