FCSS-LED-AR-7-6: Fortinet NSE 6 - LAN Edge 7.6 ArchitectDemo

By Fortinet · Question Mode

QuestionQ1

Authentication

Refer to the exhibit.

Question Image

The exhibit displays an LDAP server configuration in which the full content of the Username setting is expanded. The administrator configured LDAP on FortiGate and is troubleshooting authentication problems. As part of troubleshooting, the administrator runs dsquery user -samid student on the Windows Active Directory (AD) server at IP address 10.0.1.10 and receives this output: CN=student,CN=Users,DC=trainingAD,DC=training,DC=lab.

Based on the dsquery output, which FortiGate LDAP setting is misconfigured?

  • A The Common Name Identifier is incorrectly set, causing authentication failures.
  • B The Bind Type is incorrectly configured, preventing FortiGate from connecting to the LDAP server.
  • C The Distinguished Name setting is incorrectly configured, causing issues with user authentication.
  • D Sever IP/Name is misconfigured so FortiGate can’t reach the LDAP server.
Explanation

The Distinguished Name is the LDAP search base for locating directory objects. It must include the account’s actual directory path. The configured value omits DC=trainingAD; the correct base is CN=Users,DC=trainingAD,DC=training,DC=lab. This mismatch prevents a proper user lookup even though the LDAP server connection succeeds.

Community Discussion

No comments yet. Be the first to start the discussion!