FCSS_LED_AR-7.6 무료 덤프문제 온라인 액세스

Refer to the exhibits to analyze a network topology and SSID settings.



FortiGate is configured to use an external captive portal for authentication to grant access to a wireless network. Testing detected that users attempting to access the SSID are not able to access the captive portal login page.
Which configuration change should fix this issue?

• A.A firewall policy with port4 as source is missing.
• B.Address objects FortiAuthenticator and WindowsAD must be included as exempt destinations/services.
• C.Firewall policy with the ID 13 must have NAT disabled.
• D.Change the SSID security mode to WPA2-Enterprise for authentication.

Refer to the exhibits.


Examine the FortiGate RSSO configuration shown in the exhibit.
FortiGate is set up to use RSSO for user authentication. It is currently receiving RADIUS accounting messages through port3. The incoming RADIUS accounting messages contain the username in the User-Name attribute and group membership in the Class attribute.
You must ensure that the users are authenticated through these RADIUS accounting messages and accurately mapped to their respective RSSO user groups.
Which three critical configurations must you implement on the FortiGate device? (Choose three.)

• A.RSSO user groups should be assigned to all firewall policies.
• B.The RADIUS Attribute Value setting configured for an RSSO user group should match the Class RADIUS attribute value in the RADIUS accounting message.
• C.The rsso-endpoint-attribute CLI setting in the RSSO agent configuration should be set to User- Name.
• D.Device detection and Security Fabric Connection should be enabled on port3.
• E.The sso-attribute CLI setting in the RSSO agent configuration should be set to Class.

Refer to the exhibit.

Port2 on FortiSwitch is configured with an 802.1X authentication security policy, but a device connected to port2 is unable to access the network. The administrator has gathered the diagnose output, as shown in the exhibit, to investigate the issue.
Which two scenarios could explain why the device is failing to gain network access? (Choose two.)

• A.The device has been assigned the guest VLAN.
• B.The device is not configured for 802.1X authentication.
• C.The device does not support 802.1X authentication.
• D.The device has been quarantined for 3600 seconds.

Refer to the exhibits.

FortiGate has been added to FortiAIOps for management.
Which step must be performed on FortiAIOps to add a FortiSwitch device connected to the recently added FortiGate?

• A.FortiSwitch is added automatically.
• B.FortiAIOps requires that the FortiSwitch IP address is submitted.
• C.Add the FortiSwitch device by submitting its serial number.
• D.Configure the FortiSwitch IP address, user ID, and password

You want to configure Syslog-based single sign-on (SSO) on FortiAuthenticator to enhance user authentication across your network. You have to ensure that the system correctly extracts the user information from syslog messages and links it to the correct authentication events.
Which two steps must you perform to successfully configure Syslog SSO on FortiAuthenticator?
(Choose two.)

• A.Enable syslog forwarding on source devices.
• B.Specify the devices that will send syslog messages to FortiAuthenticator.
• C.Set up user authentication policies in FortiAuthenticator.
• D.Configure parsing rules to extract the relevant information from syslog messages.
• E.Configure the syslog messages that FortiAuthenticator sends to authentication devices.