Fortinet NSE 7 - Secure Access 6.2 認定 NSE7_SAC-6.2 試験問題:

1. Refer to the exhibit.

In the WTP profile configuration shown in the exhibit, the AP profile is assigned to two FAP-320 APs that are installed in an open plan office
*The first AP has 32 clients associated to the 5GHz radios and 22 clients associated to the 2.4GHzradio.
*The second AP has 12 clients associated to the 5GHz radios and 20 clients associated to the 2.4GHz radio.
A dual band-capable client enters the office near the first AP and the first AP measures the new client at -33 dBm signal strength. The secondAP measures the new client at - 4 3 dBm signal strength.
If the new client attempts to connect to the corporate wireless network, to which AP radio will the client be associated?

A) The second AP 5GHz interface.
B) The second AP 2.4GHz interface.
C) The first AP 5GHz interface.
D) The first AP 2.4GHz interface.

2. An administrator is deploying APs that are connecting over an IPsec network. All APs have been configured to connect to FortiGate manually. FortiGate can discover the APs and authorize them. However, FortiGate is unable to establish CAPWAPtunnels to manage the APs.
Which configuration setting can the administrator perform to resolve the problem?

A) Enable CAPWAP administrative access on the IPsec interface.
B) Decrease the CAPWAP tunnel MTU size for APs to prevent fragmentation.
C) Assign a custom AP profile for the remote APs with the set mpls-connection option enabled.
D) Upgradethe FortiAP firmware image to ensure compatibility with the FortiOS version.

3. Which statement correctly describes the guest portal behavior on FortiAuthenticator?

A) FortiAuthenticator uses POST parameters and a RADIUS client configuration to map the request to a guest portal for authentication.
B) All guest accounts must be activated using SMS or email activation codes.
C) Sponsored accounts cannot authenticate using guest portals.
D) All self-registered and sponsored accounts are listed on the local Users GUI page on FortiAuthenticator.

質問と回答：