Free Fortinet FCSS_LED_AR-7.6 Exam Questions

Question 1

Refer to the exhibit.Review the exhibits to analyze the network topology, SSID settings, and firewall policies. FortiGate is configured to use an external captive portal for authentication to grant access to a wireless network. During testing, it was found that users attempting to connect to the SSID cannot access the captive portal login page. What configuration change should be made to resolve this issue to allow users to access the captive portal?

A : Change the SSID security mode to WPA2-Enterprise for authentication.

B : Disable HTTPS redirection for the captive portal authentication page.

C : Exclude FortiAuthenticator and Windows AD address objects from filtering.

D : A firewall policy allowing Guest SSID traffic to reach FortiAuthenticator and Windows AD.

Answer: D

Question 2

Refer to the exhibit.Review the exhibits to analyze the network topology, SSID settings, and firewall policies. FortiGate is configured to use an external captive portal for authentication to grant access to a wireless network. During testing, it was found that users attempting to connect to the SSID cannot access the captive portal login page. What configuration change should be made to resolve this issue to allow users to access the captive portal?

A : Change the SSID security mode to WPA2-Enterprise for authentication.

B : Disable HTTPS redirection for the captive portal authentication page.

C : Exclude FortiAuthenticator and Windows AD address objects from filtering.

D : A firewall policy allowing Guest SSID traffic to reach FortiAuthenticator and Windows AD.

Answer: D

Question 3

Refer to the exhibit.Review the exhibits to analyze the network topology, SSID settings, and firewall policies. FortiGate is configured to use an external captive portal for authentication to grant access to a wireless network. During testing, it was found that users attempting to connect to the SSID cannot access the captive portal login page. What configuration change should be made to resolve this issue to allow users to access the captive portal?

A : Change the SSID security mode to WPA2-Enterprise for authentication.

B : Disable HTTPS redirection for the captive portal authentication page.

C : Exclude FortiAuthenticator and Windows AD address objects from filtering.

D : A firewall policy allowing Guest SSID traffic to reach FortiAuthenticator and Windows AD.

Answer: D

Question 4

Refer to the exhibit.Review the exhibits to analyze the network topology, SSID settings, and firewall policies. FortiGate is configured to use an external captive portal for authentication to grant access to a wireless network. During testing, it was found that users attempting to connect to the SSID cannot access the captive portal login page. What configuration change should be made to resolve this issue to allow users to access the captive portal?

A : Change the SSID security mode to WPA2-Enterprise for authentication.

B : Disable HTTPS redirection for the captive portal authentication page.

C : Exclude FortiAuthenticator and Windows AD address objects from filtering.

D : A firewall policy allowing Guest SSID traffic to reach FortiAuthenticator and Windows AD.

Answer: D

Question 5

Refer to the exhibits. The exhibits show the VAP configuration. Wi-Fi SSIDs. and zone table. Which two statements describe how FortiGate handles VLAN assignment for wireless clients? (Choose two.)

A : FortiGate will load balance clients using VLAN 101 and VLAN 102 and assign them an IP address from the 10.0.3.0 subnet.

B : All clients connecting to the Corp Zone will receive an IP address from the 10.0.20.0 subnet.

C : Clients connecting to APs in the Floor 1 group will not be able to receive an IP address.

D : Clients connecting to APs in the Office group will be assigned to VLAN 102.

Answer: C,D