NSE7_SAC-6.2 Free Practice Test

Refer to the exhibit.

Examine the packet capture shown in the exhibit, which contains a RADIUS access request packet sent by FortiSwitch to a RADIUS server.
Why does the User-Name field in the RADIUS access request packet contain a MAC address?

1. A. The FortiSwitch interface is configured for 802 IX port authentication with MAC address bypass, andthe connected device does not support 802.1X.
2. B. FortiSwitch authenticates itself using its MAC address as the user name.
3. C. The connected device is doing machine authentication
4. D. FortiSwitch is replying to an access challenge packet sent by the RADIUS server and requesting the client MAC address.

Correct Answer: D

A wireless network in a school provides guest accessusing a captive portal to allow unregistered users to self-register and access the network. The administrator is requested to update the existing configuration to provide captive portal authentication through a secure connection (HTTPS) to protect and encrypt guest user credentials after they receive the login information when registered for the first time.
Which two changes must the administrator make to enforce HTTPS authentication? (Choose two.)

1. A. Provide instructions to users to use HTTPS to access the network
2. B. Create a new SSID with the HTTPS captive portal URL
3. C. Enable Redirect HTTP Challenge to a Secure Channel (HTTPS) in the user authentication settings
4. D. Update the captive portal URL to use HTTPS on FortiGate and FortiAuthenticator

Correct Answer: BD

Examine the network topology shown in the exhibit. Which port should have root guard enabled?

1. A. FortiSwitch A, port2
2. B. FortiSwitch A, port1
3. C. FortiSwitch
4. D. port1
5. E. FortiSwitch
6. F. port2

Correct Answer: A

Which two statements about the use of digital certificates are true? (Choose two.)

1. A. An intermediate CA can sign server certificates.
2. B. An intermediate CA can sign another intermediate CA certificate.
3. C. The end entity's certificate can only be created by an intermediate CA.
4. D. An intermediate CA can validate the end entity certificate signed by another intermediate CA

Correct Answer: BD

What action does FortiSwitch take when it receives a loop guard data packet (LGDP) that was sent by itself?

1. A. The receiving port is shut down.
2. B. The sending port is shut down.
3. C. The receiving port is moved to the STP blocking state.
4. D. The sending port is moved to the STP blocking state

Correct Answer: B