Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Fortinet Exam NSE7_LED-7.0 Topic 1 Question 21 Discussion

Actual exam question for Fortinet's NSE7_LED-7.0 exam
Question #: 21
Topic #: 1
[All NSE7_LED-7.0 Questions]

Where can FortiGate learn the FortiManager IP address or FQDN for zero-touch provisioning'?

Show Suggested Answer Hide Answer
Suggested Answer: C, D

According to the FortiManager Administration Guide, ''Central management mode allows you to manage all FortiSwitch devices from a single interface on the FortiManager device.'' Therefore, option C is true because the exhibit shows that the FortiSwitch manager is enabled and the FortiSwitch device is managed by the FortiManager device. Option D is also true because the exhibit shows that the FortiSwitch device status is offline, which means that it is not reachable by the FortiManager device, but it is authorized, which means that it has been added to the FortiManager device. Option A is false because per-device management mode allows you to manage each FortiSwitch device individually from its own web-based manager or CLI, which is not the case in the exhibit. Option B is false because the FortiSwitch device is authorized, as explained above.


Contribute your Thoughts:

Tamera
1 months ago
Alright, let's see what the FortiGate can learn. I'm betting it can do a lot more than just tell time!
upvoted 0 times
...
Melissa
1 months ago
Hold up, did someone say 'zero-touch'? Sounds like my kind of provisioning! *wink wink*
upvoted 0 times
Maryrose
3 days ago
User2: C) From a DHCP server using options 240 and 241
upvoted 0 times
...
Zona
14 days ago
User1: A) From an LDAP server using a simple bind operation
upvoted 0 times
...
...
Francis
1 months ago
I'm not too familiar with this topic, but option C does seem to be the most relevant based on the question. Anyone have any insights to share?
upvoted 0 times
Glory
3 days ago
Yes, that's correct. DHCP server is commonly used for zero-touch provisioning in FortiGate.
upvoted 0 times
...
Glory
5 days ago
I agree, DHCP server using options 240 and 241 makes sense for FortiGate to learn the FortiManager IP address.
upvoted 0 times
...
Oliva
11 days ago
Option C seems to be the most relevant for zero-touch provisioning.
upvoted 0 times
...
...
Dana
2 months ago
Option C seems like the most logical choice here. Using DHCP options 240 and 241 to retrieve the FortiManager details sounds like the way to go for zero-touch provisioning.
upvoted 0 times
Emilio
12 days ago
I think it's important to have a reliable way for FortiGate to learn the FortiManager IP address or FQDN, and using DHCP options sounds like a good solution.
upvoted 0 times
...
Tijuana
16 days ago
Yes, using DHCP options 240 and 241 would make the zero-touch provisioning process much smoother.
upvoted 0 times
...
Samira
1 months ago
I agree, option C does seem like the most logical choice for retrieving the FortiManager details.
upvoted 0 times
...
...
Paulene
2 months ago
I'm not sure, but I think D) From a DNS server using A or AAAA records could also be a valid option.
upvoted 0 times
...
Sherell
2 months ago
I agree with Chuck, because DHCP is commonly used for automatic network configuration.
upvoted 0 times
...
Chuck
2 months ago
I think the answer is C) From a DHCP server using options 240 and 241.
upvoted 0 times
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77