100% Free Fortinet NSE7_LED-7.0 Practice Test Questions

Question 1

Refer to the exhibits

The exhibits show the wireless network (VAP) SSID profiles defined on FortiManager and an AP profile assigned to a group of APs that are supported by FortiGate None of the APs are broadcasting the SSlDs defined by the AP profile Which changes do you need to make to enable the SSIDs to broadcast?

A : In the SSIDs section enable Tunnel

B : Enable one channel in the Channels section

C : Enable multiple channels in the Channels section and enable Radio Resource Provision

D : In the SSIDs section enable Manual and assign the networks manually

Answer: B

Question 2

Refer to the exhibit.The exhibit shows a network topology and SSID settings. FortiGate is configured to use an external captive portal. However, wireless users are not able to see the captive portal login page. Which configuration change should the administrator make to fix the problem?

A : Remove the guest.portal user group in the firewall policy.

B : Enable the captive-portal-exempt option in the firewall policy with the ID 10.

C : Create a firewall policy to allow traffic from the Guest SSID to FortiAuthenticator and Windows AD devices.

D : Add the FortiAuthenticator and WindowsAD address objects as exempt sources.

Answer: C

Question 3

Which two statements about FortiSwitch manager are true1? (Choose two)

A : Per-device management is the default management mode on FortiManager

B : FortiManager obtains the FortiSwitch status information by querying the FortiGate REST API every three minutes

C : If the administrator makes any changes on FortiSwitch manager they must also install those changes on FortiGate so that those changes are applied on the managed switches

D : Any switch discovered or authorized on FortiGate must be added manually on FortiSwitch manager

Answer: B,C

Question 4

An administrator is deploying a new FortiGate device using zero-touch provisioning. Before deployment, the administrator added the FortiGate serial number on FortiManager and configured all the FortiGate settings FortiGate has a factory default configuration. However, when the administrator connects FortiGate to the network, FortiManager does not start the installation automatically. Which two scenarios are likely to cause this issue? (Choose two.)

A : The serial number added on FortiManager does not match the FortiGate serial number.

B : The DHCP server that serves FortiGate is not configured with options 240 and 241.

C : Zero-touch provisioning is disabled on FortiManager.

D : The pre-shared key set on FortiManager does not match the one set on FortiGate.

Answer: A,B

Question 5