Free Fortinet NSE7_LED-7.0 Exam Questions

Question 1

Refer to the exhibit.

Examine the FortiSwitch security policy shown in the exhibit If the security profile shown in the exhibit is assigned to all ports on a FortiSwitch device for 802 1X authentication which statement about the switch is correct?

A : FortiSwitch cannot authenticate multiple devices connected to the same port

B : FortiSwitch will try to authenticate non-802 1X devices using the device MAC address as the username and password

C : FortiSwitch will assign non-802 1X devices to the onboarding VLAN

D : All EAP messages will be terminated on FortiSwitch

Answer: C

Question 2

Which two statements about FortiSwitch manager are true1? (Choose two)

A : Per-device management is the default management mode on FortiManager

B : FortiManager obtains the FortiSwitch status information by querying the FortiGate REST API every three minutes

C : If the administrator makes any changes on FortiSwitch manager they must also install those changes on FortiGate so that those changes are applied on the managed switches

D : Any switch discovered or authorized on FortiGate must be added manually on FortiSwitch manager

Answer: B,C

Question 3

Which two statements about FortiSwitch manager are true1? (Choose two)

A : Per-device management is the default management mode on FortiManager

B : FortiManager obtains the FortiSwitch status information by querying the FortiGate REST API every three minutes

C : If the administrator makes any changes on FortiSwitch manager they must also install those changes on FortiGate so that those changes are applied on the managed switches

D : Any switch discovered or authorized on FortiGate must be added manually on FortiSwitch manager

Answer: B,C

Question 4

An administrator is deploying a new FortiGate device using zero-touch provisioning. Before deployment, the administrator added the FortiGate serial number on FortiManager and configured all the FortiGate settings FortiGate has a factory default configuration. However, when the administrator connects FortiGate to the network, FortiManager does not start the installation automatically. Which two scenarios are likely to cause this issue? (Choose two.)

A : The serial number added on FortiManager does not match the FortiGate serial number.

B : The DHCP server that serves FortiGate is not configured with options 240 and 241.

C : Zero-touch provisioning is disabled on FortiManager.

D : The pre-shared key set on FortiManager does not match the one set on FortiGate.

Answer: A,B

Question 5