In a Windows environment using AD machine authentication, how does FortiAuthenticator ensure that a previously authenticated device is maintaining its network access once the device resumes operating after sleep or hibernation?

• A.It sends a wake-on-LAN packet to trigger reauthentication.
• B.It caches the MAC address of authenticated devices for a configurable period of time.
• C.It temporarily assigns the device to a guest VLAN until full reauthentication is completed.
• D.It uses machine authentication based on the device IP address.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

The FortiManager device is set to central management mode for FortiSwitch devices. How are configuration changes applied to multiple FortiSwitch devices? Response:

• A.Changes are made through a template.
• B.Configuration changes require manually updating each device.
• C.Configuration changes are made on individual switches.
• D.Changes are applied only to switches that share the same model number.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit. On FortiGate, a RADIUS server is configured to forward authentication requests to FortiAuthenticator, which acts as a RADIUS proxy. FortiAuthenticator then relays these authentication requests to a remote Windows AD server using LDAP.
While testing authentication using the CLI command diagnose test authserver. the administrator observed that authentication succeeded with PAP but failed when using MS-CHAFV2.
Which two solutions can the administrator implement to enable MS-CHAPv2 authentication?
(Choose two.)

• A.Change the FortiGate authentication method to CHAP instead of MS-CHAPv2.
• B.Enable RADIUS attribute filtering on FortiAuthenticator.
• C.Configure FortiAuthenticator to use RADIUS instead of LDAP as the back-end authentication server
• D.Enable Windows Active Directory domain authentication on FortiAuthenticator.

Comment: *

Name: *

Email: *

Verification: *

Why is it critical to maintain NTP synchronization between FortiGate and FortiSwitch when FortiLink is configured?

• A.To facilitate synchronization of firmware updates across devices
• B.To allow FortiSwitch to communicate with other FortiSwitche devices in the network.
• C.To ensure accurate time for logs, authentication, and event correlation
• D.To allow FortiSwitch to function in standalone mode if FortiGate becomes unavailable

Comment: *

Name: *

Email: *

Verification: *

You are setting up a captive portal to provide Wi-Fi access for visitors. To simplify the process, your team wants visitors to authenticate using their existing social media accounts instead of creating new accounts or entering credentials manually. Which two actions are required to enable this functionality? (Choose two.)

• A.Set up the FortiAuthenticator internal database as the primary source for user credentials.
• B.Configure only the email login option because a social media login cannot be used with captive portals.
• C.Configure the social login profiles for the supported platforms.
• D.Set up a remote open authorization (OAuth) server for each selected social media platform.
• E.Enable Account Login as the authentication type and configure a remote LDAP server.

Comment: *

Name: *

Email: *

Verification: *