Is this exam completely free?

ExamCademy offers a free preview for every exam, covering around 20% of the total questions. Full access to all questions is available for free by signing up for an account. Optional supporters unlock AstroTutor (AI tutor) and advanced study modes.

Can I practice IT certification exams from Microsoft, AWS, or CompTIA?

Yes! ExamCademy supports a wide range of IT certification exams including Microsoft Azure, AWS Cloud Practitioner, and CompTIA A+ and Security+.

How accurate are the mock exams?

Our practice questions are community-created and moderator-reviewed to align with realistic exam objectives, style, and difficulty.

NSE7-LED-7-0 by Fortinet - Page 1 | ExamCademy

Mode Selection

Sort:

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

That's the end of the Preview

Create a free account to unlock all questions for this exam.

Log In / Sign Up

Page 1 of 3 • Questions 1-25 of 51

1 2 3

→

Know a question that should be here? Contribute to this exam

Refer to the exhibits.

Question Image

Examine the firewall policy configuration and SSID settings.
An administrator has configured a guest wireless network on FortiGate using the external captive portal. The administrator has verified that the external captive portal URL is correct. However, wireless users are not able to see the captive portal login page.
Given the configuration shown in the exhibit and the SSID settings, which configuration change should the administrator make to fix the problem?

A Disable the user group from the SSID configuration.
B Enable the captive-portal-exempt option in the firewall policy with the ID 11.
C Apply a guest.portal user group in the firewall policy with the ID 11.
D Include the wireless client subnet range in the Exempt Source section.

Which FortiSwitch VLANs are automatically created on FortiGate when the first FortiSwitch device is discovered?

A default, quarantine, rspan, voice, video, onboarding, and nac_segment
B access, quarantine, rspan, voice, video, and onboarding
C default, quarantine, rspan, voice, video, and nac_segment
D fortilink, quarantine, erspan, voice, video, and onboarding

Refer to the exhibits.

Question Image

Examine the troubleshooting outputs shown in the exhibits.
Users have been reporting issues with the speed of their wireless connection in a particular part of the wireless network. The interface that is having issues is the 2.4 GHz interface that is currently configured on channel 6.
The administrator of the wireless network has investigated and surveyed the local RF environment using the tools available at the AP and FortiGate.
Which configuration would improve the wireless connection?

A Change the AP 2.4 GHz channel to 11
B Change the AP 2.4 GHz channel to 1
C Change the AP 2.4 GHz channel to 9.
D Change the AP 2.4 GHz channel to 13.

Which two statements about the MAC-based 802.1X security mode available on FortiSwitch are true? (Choose two.)

A FortiSwitch authenticates a single device, and opens the port to other devices connected to the port.
B FortiSwitch authenticates each device connected to the port.
C It cannot be used in conjunction with MAC authentication bypass.
D FortiSwitch can grant different access levels to each device connected to the port.

Which two pieces of information can the diagnose test authserver ldap command provide? (Choose two.)

A It displays whether the admin bind user credentials are correct.
B It displays whether the user credentials are correct.
C It displays the LDAP codes returned by the LDAP server.
D It displays the LDAP groups found for the user.

Which two statements about FortiSwitch manager are true? (Choose two.)

A Per-device management is the default management mode on FortiManager.
B FortiManager obtains the FortiSwitch status information by querying the FortiGate REST API every three minutes.
C If the administrator makes any changes on FortiSwitch manager, they must also install those changes on FortiGate so that those changes are applied on the managed switches.
D Any switch discovered or authorized on FortiGate must be added manually on FortiSwitch manager.

Refer to the exhibit.

Question Image

The exhibits show the wireless network (VAP) SSID profiles defined on FortiManager and an AP profile assigned to a group of APs that are supported by FortiGate.
None of the APs are broadcasting the SSIDs defined by the AP profile.
Which changes do you need to make to enable the SSIDs to broadcast?

A In the SSIDs section, enable Tunnel.
B Enable one channel in the Channels section.
C Enable multiple channels in the Channels section and enable Radio Resource Provision.
D In the SSIDs section, enable Manual and assign the networks manually.

Refer to the exhibit.

Question Image

Examine the IPsec VPN phase 1 configuration shown in the exhibit.
An administrator wants to use certificate-based authentication for an IPsec VPN user.
Which three configuration changes must you make on FortiGate to perform certificate-based authentication for the IPsec VPN user? (Choose three.)

A Create a PKI user for the IPsec VPN user, and then configure the IPsec VPN tunnel to accept the PKI user as peer certificate.
B In the Authentication section of the IPsec VPN tunnel, in the Method drop-down list, select Signature, and then select the certificate that FortiGate will use for IPsec VPN.
C In the IKE section of the IPsec VPN tunnel, in the Mode field, select Main (ID protection).
D Import the CA that signed the user certificate.
E Enable XAUTH on the IPsec VPN tunnel.

Refer to the exhibit.

Question Image

Examine the FortiManager configuration and FortiGate CLI output shown in the exhibit.
An administrator is testing the NAC feature. The test device is connected to a managed FortiSwitch device (S224EPTF19005867) on port2.
After applying the NAC policy on port2 and generating traffic on the test device, the test device is not matching the NAC policy; therefore, the test device remains in the onboarding VLAN.
Based on the information shown in the exhibit, which two scenarios are likely to cause this issue? (Choose two.)

A Management communication between FortiGate and FortiSwitch is down.
B The MAC address configured on the NAC policy is incorrect.
C The device operating system detected by FortiGate is not Linux.
D Device detection is not enabled on VLAN 4089.

Refer to the exhibit.

Question Image

Examine the sections of the configuration shown in the output.
What action will FortiGate take when verifying the student certificate through OCSP?

A Reject the student certificate if the OCSP server replies that the student certificate status is unknown
B Not verify the OCSP server certificate
C Use the OCSP URL included in the student certificate to verify the student certificate
D Consider the student certificate status as valid if the OCSP server is unreachable

You are setting up an SSID (VAP) to perform RADIUS-authenticated dynamic VLAN allocation.
Which three RADIUS attributes must be supplied by the RADIUS server to enable successful VLAN allocation? (Choose three.)

A Tunnel-Private-Group-ID
B Tunnel-Pvt-Group-ID
C Tunnel-Preference
D Tunnel-Type
E Tunnel-Medium-Type

NSE7-LED-7-0Preview

Mode Selection

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

That's the end of the Preview