Download Fortinet NSE 7 -Secure Access 6-2.VCEplus.NSE7_SAC-6.2.2020-10-16.1e.30q.vcex

Download Exam

File Info

Exam Fortinet NSE 7 - Secure Access 6.2
Number NSE7_SAC-6.2
File Name Fortinet NSE 7 -Secure Access 6-2.VCEplus.NSE7_SAC-6.2.2020-10-16.1e.30q.vcex
Size 3.85 Mb
Posted October 16, 2020
Downloads 1

How to open VCEX & EXAM Files?

Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.


With discount: 20%


Demo Questions

Question 1
Which step can be taken to ensure that only FortiAP devices receive IP addresses from a DHCP server on FortiGate?

  • A: Change the interface addressing mode to FortiAP devices.
  • B: Create a reservation list in the DHCP server settings.
  • C: Configure a VCI string value of FortiAP in the DHCP server settings.
  • D: Use DHCP option 138 to assign IPs to FortiAP devices.

Question 2
Refer to the exhibit.


In the WTP profile configuration shown in the exhibit, the AP profile is assigned to two FAP-320 APs that are installed in an open plan office.
The first AP has 32 clients associated to the 5GHz radios and 22 clients associated to the 2.4GHz radio. 
The second AP has 12 clients associated to the 5GHz radios and 20 clients associated to the 2.4GHz radio.
A dual band-capable client enters the office near the first AP and the first AP measures the new client at −33 dBm signal strength. The second AP measures the new client at −43 dBm signal strength.
In the new client attempts to connect to the corporate wireless network, to which AP radio will the client be associated?

  • A: The second AP 5GHz interface.
  • B: The first AP 2.4GHz interface.
  • C: The first AP 5GHz interface.
  • D: The second AP 2.4GHz interface.

Question 3
Which two EAP methods can use MSCHAPV2 for client authentication? (Choose two.)

  • A: PEAP
  • C: EAP-TLS
  • D: EAP-GTC

Question 4
Which two statements about the use of digital certificates are true? (Choose two.)

  • A: An intermediate CA can sign server certificates.
  • B: An intermediate CA can sign another intermediate CA certificate.
  • C: The end entity's certificate can only be created by an intermediate CA.
  • D: An intermediate CA can validate the end entity certificate signed by another intermediate CA.

Question 5
802.1X port authentication is enabled on only those ports that the FortiSwitch security policy is assigned to.
Which configurable items are available when you configure the security policy on FortiSwitch? (Choose two.)

  • A: FSSO groups
  • B: Security mode
  • C: User groups
  • D: Default guest group

Question 6
A wireless network in a school provides guest access using a captive portal to allow unregistered users to self-register and access the network. The administrator is requested to update the existing configuration to provide captive portal authentication through a secure connection (HTTPS) to protect and encrypt guest user credentials after they receive the login information when registered for the first time. Which two changes must the administrator make to enforce HTTPS authentication? (Choose two.)

  • A: Provide instructions to users to use HTTPS to access the network.
  • B: Create a new SSID with the HTTPS captive portal URL.
  • C: Enable Redirect HTTP Challenge to a Secure Channel (HTTPS) in the user authentication settings 
  • D: Update the captive portal URL to use HTTPS on FortiGate and FortiAuthenticator

Question 7
An administrator is deploying APs that are connecting over an IPsec network. All APs have been configured to connect to FortiGate manually. FortiGate can discover the APs and authorize them. However, FortiGate is unable to establish CAPWAP tunnels to manage the APs.
Which configuration setting can the administrator perform to resolve the problem?

  • A: Decrease the CAPWAP tunnel MTU size for APs to prevent fragmentation.
  • B: Enable CAPWAP administrative access on the IPsec interface.
  • C: Upgrade the FortiAP firmware image to ensure compatibility with the FortiOS version.
  • D: Assign a custom AP profile for the remote APs with the set mpls-connection option enabled.

Question 8
Refer to the exhibit. 


A host machine connected to port2 on FortiSwitch cannot connect to the network. All ports on FortiSwitch are assigned a security policy to enforce 802.1X port authentication. While troubleshooting the issue, the administrator runs the debug command and obtains the output shown in the exhibit.
Which two scenarios are the likely cause of this issue? (Choose two.)

  • A: The host machine is not configured for 802.1X port authentication.
  • B: The host machine does not support 802. 1X authentication.
  • C: The host machine is quarantined due to a security incident.
  • D: The host machine is configured with wrong VLAN ID.

Question 9
What action does FortiSwitch take when it receives a loop guard data packet (LGDP) that was sent by itself?

  • A: The receiving port is shut down.
  • B: The sending port is shut down
  • C: The receiving port is moved to the STP blocking state.
  • D: The sending port is moved to the STP blocking state

Question 10
Default VLANs are created on FortiGate when the FortiLink interface is created.
By default, which VLAN is set as Allowed VLANs on all FortiSwitch ports? 

  • A: Sniffer VLAN
  • B: Camera VLAN
  • C: Quarantine VLAN
  • D: Voice VLAN


You can buy ProfExam with a 20% discount..

Get Now!


Use ProfExam Simulator to open VCEX and EXAM files
ProfExam Screen


Use VCE Exam Simulator to open VCE files