Free Cram & Latest Exams Dumps

QUESTION 15
You are configuring 2FA using EAP-TLS. Which field must the certificate include to match the username?
Response:

QUESTION 16
How do you configure a FortiAuthenticator guest portal to expire credentials after 2 hours?
Response:

QUESTION 17
Refer to the exhibits which show the FortiSwitch and FortiGate interface configurations.
FortiSwitch VLAN configuration

Port2 interface configuration

Which two statements describe how port2 handles tagged and untagged traffic? (Choose two.) Response:

QUESTION 18
When the MAC address of a device is placed in quarantine on FortiSwitch, what happens to its egress traffic?

QUESTION 19
Which Fortinet components are typically involved in implementing NAC policies for wired and wireless networks?
(Choose two)
Response:

QUESTION 20
Which authentication methods can be used in FortiAuthenticator for two-factor authentication with digital certificates?
(Choose two)
Response:

QUESTION 21
Refer to the exhibits.


Examine the FortiGate RSSO configuration shown in the exhibit.
FortiGate is set up to use RSSO for user authentication. It is currently receiving RADIUS accounting messages through port3. The incoming RADIUS accounting messages contain the username in the User- Name attribute and group membership in the Class attribute. You must ensure that the users are authenticated through these RADIUS accounting messages and accurately mapped to their respective RSSO user groups.
Which three critical configurations must you implement on the FortiGate device? (Choose three.)

QUESTION 22
In FortiLink NAC deployment, which FortiOS feature is used to evaluate endpoint posture before granting access?
Response:

QUESTION 23
What does it mean if a FortiSwitch status is “Managed (Disconnected)” in FortiGate?
Response:

QUESTION 24
Which two configuration steps are needed to enforce authentication for guest access?
(Choose two)
Response:

QUESTION 25
When configuring a FortiSwitch trunk port, which actions are needed?
(Choose two)
Response:

QUESTION 26
Which field in a RADIUS accounting message is used by FortiAuthenticator for RSSO group assignment?
Response:

QUESTION 27
Refer to the exhibit.

On FortiGate, a RADIUS server is configured to forward authentication requests to FortiAuthenticator, which acts as a RADIUS proxy. FortiAuthenticator then relays these authentication requests to a remote Windows AD server using LDAP.
While testing authentication using the CLI command diagnose test authserver. the administrator observed that authentication succeeded with PAP but failed when using MS-CHAFV2.
Which two solutions can the administrator implement to enable MS-CHAPv2 authentication? (Choose two.)

QUESTION 28
What is the default behavior of a factory-reset FortiGate with internet access and no configuration?
Response:

QUESTION 29
Which CLI automation action on FortiGate is used to define automatic quarantine based on event logs?
Response:

QUESTION 30
Refer to the exhibit.



Review the exhibits to analyze the network topology, SSID settings, and firewall policies.
FortiGate is configured to use an external captive portal for authentication to grant access to a wireless network. During testing, it was found that users attempting to connect to the SSID cannot access the captive portal login page.
What configuration change should be made to resolve this issue to allow users to access the captive portal?

QUESTION 31
Which of the following are required steps to configure FortiAuthenticator as a RADIUS server for user authentication?
(Choose two)
Response:

QUESTION 32
Which command verifies FortiExtender signal strength on a FortiGate CLI?
Response:

QUESTION 33
Which configuration elements are required to assign a VLAN to a FortiSwitch port?
(Choose two)
Response:

QUESTION 34
Refer to the exhibits.




You are adding a new FortiSwitch to FortiGate for management. All necessary settings have been configured on FortiGate, but FortiSwitch remains offline. The cabling has been verified and is correctly connected.
Which misconfiguration might be preventing FortiGate from detecting FortiSwitch?

QUESTION 35
If a FortiAP fails to connect to FortiGate, which component should be checked first?
Response:

QUESTION 36
Which CLI command checks the FortiLink status for connected FortiSwitches?
Response:

QUESTION 37
Which Fortinet technologies can dynamically assign VLANs based on user or device attributes?
(Choose two)
Response:

QUESTION 38
Which two use cases justify configuring automatic quarantine?
(Choose two)
Response:

QUESTION 39
What is the primary requirement for FortiManager to manage a FortiSwitch via FortiGate using FortiLink?
Response: