Fortinet Exam NSE7_LED-7.0 Topic 3 Question 26 Discussion

Actual exam question for Fortinet's NSE7_LED-7.0 exam

Question #: 26
Topic #: 3

Refer to the exhibit.

Examine the RADIUS server configuration shown in the exhibit

An administrator has configured a RADIUS server on FortiGate that points to FortiAuthenticator FortiAuthenticator is acting as an authentication proxy and is configured to relay all authentication requests to a remote Windows AD server using LDAP

While testing the configuration the administrator noticed that the diagnose test authserver command worked with PAP, however authentication requests failed when using MSCHAP2

Which two solutions can the administrator implement to get MSCHAP2 authentication to work'' (Choose two.)

AOn FortiAuthenticator enable Windows Active Directory Domain Authentication to add FortiAuthenticator to the Windows domain

BOn FortiGate configure the NAS IP setting on the RADIUS server

COn FortiAuthenticator change the back-end authentication server from LDAP to RADIUS

DOn FortiGate update the Secret setting on the RADIUS server

Show Suggested Answer

Suggested Answer: A, B

According to the exhibit, the wireless guest users are getting a certificate error while loading the captive portal login page. This means that the browser cannot verify the identity of the server that is hosting the login page. Therefore, option A is true because the external server FQDN is incorrect, which means that it does not match the common name or subject alternative name of the server certificate. Option B is also true because the wireless user's browser is missing a CA certificate, which means that it does not have the root or intermediate certificate that issued the server certificate. Option C is false because the FortiGate authentication interface address is using HTTPS, which is a secure protocol that encrypts the communication between the browser and the server. Option D is false because the user address is not in DDNS form, which is not related to the certificate error.

by Anjelica at Aug 04, 2024, 07:34 PM

Limited Time Offer

25%

Off

Get Premium NSE7_LED-7.0 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

2 months ago

Hold up, option C seems a bit out there. Changing the back-end server from LDAP to RADIUS? That's like trying to fit a square peg in a round hole. I'd steer clear of that one.

upvoted 0 times

Corinne

2 days ago

User1: Definitely, let's stick to those two options and see if they help with the authentication issue.

upvoted 0 times

...

Ramonita

5 days ago

User2: Yeah, I think we should focus on options A and D instead. They seem like safer choices.

upvoted 0 times

...

Annice

24 days ago

User1: I agree, option C does seem a bit risky. It might cause more issues than it solves.

upvoted 0 times

...

2 months ago

I think the answer is A) and D)

upvoted 0 times

...