Fortinet FCSS_LED_AR-7.6 問題集

質問 1：
Your team is planning to configure a FortiGate wireless network that automatically quarantines devices using automation stitches. Which two configurations must be in place for a wireless client to be successfully quarantined upon detecting IOC events?
(Choose two.)
Response:
A. FortiAnalyzer must have a valid threat detection services license.
B. SSIDs must be configured in Bridge mode.
C. Configure FortiGate as a member of a Security Fabric group.
D. Enable Device Detection at the interface level.
正解：A,C

質問 2：
What is the primary function of a captive portal in guest Wi-Fi onboarding?
Response:
A. Allow access only after user authentication or acceptance
B. Force client to use VPN
C. Encrypt all packets using SSL
D. Automatically redirect traffic to DNS
正解：A

質問 3：
Refer to the exhibits.
FortiGate RSSO configuration

FortiGate RSSO Group

FortiGate interface configuration

RSSO authentication has been configured on FortiGate. Port3 has been enabled to receive RADIUS accounting messages. Internet access is available through port1. FortiGate is successfully handling incoming RADIUS accounting messages, ensuring that RSSO users are correctly mapped to the RSSO Group user group. The administrator realized that internet access is open to all users and aims to enforce access restrictions, ensuring that only RSSO users are permitted to have internet access. Which configuration change should the administrator apply to address this issue? Response:
A. Modify the firewall policy and add RSSO Group as a Source.
B. Change the RADIUS attribute value setting to match the name of the RADIUS attribute containing the group membership information of the RSSO users.
C. Configure a local user group and manually add users to enforce authentication-based restrictions.
D. Create a second firewall policy from port3 to port1, and select the target destination subnets.
正解：A

質問 4：
Which two actions must be taken to configure FortiAuthenticator to send logs to a syslog server?
(Choose two)
Response:
A. Enable LDAP debug
B. Choose syslog facility
C. Specify syslog server IP and port
D. Configure SNMP traps
正解：B,C

質問 5：
You are setting up FortiAuthenticator to query users from Active Directory. Which bind method must be used for secure authentication?
Response:
A. Simple Bind over SSL
B. Local User Bind
C. Anonymous Bind
D. NTLM
正解：A

質問 6：
If a FortiAP fails to connect to FortiGate, which component should be checked first?
Response:
A. CAPWAP discovery configuration
B. SNMP settings
C. FortiManager schedule
D. DNS records
正解：A

質問 7：
Which features can be configured on a FortiGate for guest wireless access control using captive portals?
(Choose two)
Response:
A. Redirect to authentication page
B. Automatic MAC binding
C. Session expiration
D. OSPF area filtering
正解：A,C