Fortinet NSE7_LED-7.0 : Fortinet NSE 7 - LAN Edge 7.0

Refer to the exhibits

The exhibits show the wireless network (VAP) SSID profiles defined on FortiManager and an AP profile assigned to a group of APs that are supported by FortiGate None of the APs are broadcasting the SSlDs defined by the AP profile Which changes do you need to make to enable the SSIDs to broadcast?

• A. In the SSIDs section enable Tunnel
• B. Enable multiple channels in the Channels section and enable Radio Resource Provision
• C. Enable one channel in the Channels section
• D. In the SSIDs section enable Manual and assign the networks manually

Refer to the exhibit.

Examine the FortiSwitch security policy shown in the exhibit.
A device that does not support 802.1X authentication is connected to a port using the Port-Security security policy.
What action does the FortiSwitch take on the port?

• A. FortiSwitch authenticates the device using the device MAC address as username and password.
• B. FortiSwitch assigns the port to the onboarding VLAN.
• C. FortiSwitch shuts down the port.
• D. FortiSwitch assigns the port to the quarantine VLAN.

Refer to the exhibit.

Examine the FortiGate configuration FortiAnalyzer logs and FortiGate widget shown in the exhibit An administrator is testing the Security Fabric quarantine automation The administrator added FortiAnalyzer to the Security Fabric and configured an automation stitch to automatically quarantine compromised devices The test device (::.:.:.!) s connected to a managed Fort Switch dev :e After trying to access a malicious website from the test device, the administrator verifies that FortiAnalyzer has a log (or the test connection However the device is not getting quarantined by FortiGate as shown in the quarantine widget Which two scenarios are likely to cause this issue? (Choose two)

• A. The web filtering rating service is not working
• B. The device does not have FortiClient installed
• C. FortiAnalyzer does not have a valid threat detection services license
• D. FortiAnalyzer does not consider the malicious website an indicator of compromise (IOC)

Refer to the exhibit.

By default FortiOS creates the following DHCP server scope for the FortiLink interface as shown in the exhibit What is the objective of the vci-string setting?

• A. To restrict the IP address assignment to FortiSwitch and FortiExtender devices
• B. To restrict the IP address assignment to devices that have FortiSwitch or FortiExtender as their hostname
• C. To ignore DHCP requests coming from FortiSwitch and FortiExtender devices
• D. To reserve IP addresses for FortiSwitch and FortiExtender devices

You are configuring a FortiGate wireless network to support automated wireless client quarantine using IOC Which two configurations must you put in place for a wireless client to be quarantined successfully? (Choose two)

• A. Configure the FortiGate device in the Security Fabric with a FortiAnalyzer device
• B. Configure the wireless network to be in tunnel mode
• C. Configure a firewall policy to allow communication
• D. Configure the wireless network to be in bridge mode