NSE7-NST-7-2: Fortinet NSE 7 - Network Security 7.2 Support EngineerDemo

By Fortinet · Question Mode

QuestionQ19

Network Security Support Engineer

Refer to the exhibit, which displays truncated output from a real-time LDAP debug.

Question Image

Which two conclusions can be drawn from the output?

Choose two
  • A The name of the configured LDAP server is Lab.
  • B The user is authenticating using CN=John Smith.
  • C FortiOS is able to locate the user in step 3 (Bind Request) of the LDAP authentication process.
  • D FortiOS is performing the second step (Search Request) in the LDAP authentication process.
Explanation

Lab is the FortiOS LDAP connection/profile named in the authentication request. The log constructs an LDAP search with the filter sAMAccountName=jsmith, enters the SEARCH state, and finds the matching distinguished name for John Smith. This is the search-request stage used to locate the user, not a bind request authenticating as that distinguished name. FortiOS documentation describes the configured LDAP connection name as a FortiGate reference name and shows LDAP debug output where a DN search locates the matching user DN.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!