Fortinet Exam NSE7_LED-7.0 Topic 1 Question 41 Discussion

Actual exam question for Fortinet's NSE7_LED-7.0 exam

Question #: 41
Topic #: 1

Refer to the exhibit.

Examine the FortiGate logs, widget, and CLI output shown in the exhibit.

An administrator is testing the Security Fabric quarantine automation. The test device (10.0.2.2) is connected to a managed FortiSwitch device.

A few seconds after trying to access a malicious website from the test device, the test device can no longer access the internet and other VLANs in the network. However, the device is still able to access other devices in the same VLAN.

Based on the information shown in the exhibit, which modification should the administrator make to fix the problem?

AConfigure a firewall policy on FortiGate to block the intra-VLAN traffic.

BChange the quarantine mode to by VLAN mode.

CEnable the access layer quarantine action on the Quarantine_Devices automation stitch.

DChange the quarantine mode to by redirect mode.

Show Suggested Answer

Suggested Answer: C

by Isabella at May 03, 2025, 01:32 AM

Limited Time Offer

25%

Off

Get Premium NSE7_LED-7.0 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Thomasena

2 days ago

C is the way to go. The exhibit clearly shows the device is still connected to the VLAN, so the problem must be with the quarantine action, not the mode. Nice try, though, Miss!

upvoted 0 times

...

Ammie

3 days ago

Haha, looks like the admin needs to brush up on their Fortinet knowledge. I bet they're wishing they had a magic 8-ball to help them figure this one out!

upvoted 0 times

...

Jess

3 days ago

I think configuring a firewall policy on FortiGate to block the intra-VLAN traffic might be necessary to resolve the issue.

upvoted 0 times

...

Stanford

7 days ago

I believe enabling the access layer quarantine action on the Quarantine_Devices automation stitch could also fix the problem.

upvoted 0 times

...

Miss

17 days ago

D looks like the correct answer to me. The question states that the device can't access the internet or other VLANs, but can still access devices in the same VLAN, which suggests a 'by redirect' quarantine mode issue.

upvoted 0 times

...

Kenda

22 days ago

I agree with Marta. Changing the quarantine mode to by VLAN mode seems like the right solution.

upvoted 0 times

...

Tommy

23 days ago

I think the answer is C. The exhibit shows that the device can still access other devices in the same VLAN, so the issue is with the quarantine action, not the VLAN itself. Enabling the access layer quarantine action should fix the problem.

upvoted 0 times

Xenia

15 hours ago

I think the answer is C.

upvoted 0 times

...

Marta

1 months ago

I think the administrator should change the quarantine mode to by VLAN mode.

upvoted 0 times

...