NSE7_SAC-6.2 무료 덤프문제 온라인 액세스

Which two statements about the use of digital certificates are true? (Choose two.)

• A.An intermediate CA can validate the end entity certificate signed by another intermediate CA
• B.The end entity's certificate can only be created by an intermediate CA.
• C.An intermediate CA can sign server certificates.
• D.An intermediate CA can sign another intermediate CA certificate.

Examine the following RADIUSconfiguration:

An administrator has configured a RADIUS server on FortiGate that points to FortiAuthenticator.
FortiAuthenticator is acting as an authentication proxy and is configured to relay all authentication requests to a remote Windows ADserver using LDAP.
While testing the configuration, the administrator notices that the diagnose test authserver command works with PAP, however, authentication requests fail when using MSCHAPv2.
Which two changes should the administrator make to get MSCHAPv2 to work? (Choose two.)

• A.Force FortiGate to use the PAP authentication method in the RADIUS server configuration.
• B.Use MSCHAP instead of using MSCHAPv2.
• C.Change the remote authentication server from LDAP to RADIUS on FortiAuthenticator.
• D.EnableWindows Active Directory Domain Authentication on FortiAuthenticator to add FortiAuthenticator to the Windows domain

Which CLI command should an administrator use to view the certificate validation process in real-time?

• A.diagnose debug application certd -1
• B.diagnose debug application authd -1
• C.diagnose debug application fnbamd -1
• D.diagnose debug application foauthd -1

An administrator is deploying APs that are connecting over an IPsec network. All APs have been configured to connect to FortiGate manually. FortiGate can discover the APs and authorize them. However, FortiGate is unable to establish CAPWAPtunnels to manage the APs.
Which configuration setting can the administrator perform to resolve the problem?

• A.Enable CAPWAP administrative access on the IPsec interface.
• B.Assign a custom AP profile for the remote APs with the set mpls-connection option enabled.
• C.Upgradethe FortiAP firmware image to ensure compatibility with the FortiOS version.
• D.Decrease the CAPWAP tunnel MTU size for APs to prevent fragmentation.