Refer to the exhibits.


Examine the network diagram and packet capture shown in the exhibit.
During packet capture analysis, a RADIUS Access-Request packet was detected being sent from FortiSwitch to FortiAuthenticator and passing through FortiGate. The capture shows that the User-Name attribute in the RADIUS Access-Request packet contains the client MAC address.
Why is the client MAC address contained in the User-Name attribute of the RADIUS Access- Request packet?

• A.FortiAuthenticator is authenticating the client based on the device hostname.
• B.FortiAuthenticator is performing machine authentication
• C.MAC address-based authentication is being used for the client through MAC Authentication Bypass (MAB).
• D.FortiGate is authenticating the client using 802.1X authentication.

Comment: *

Name: *

Email: *

Verification: *

Why is it critical to maintain NTP synchronization between FortiGate and FortiSwitch when FortiLink is configured?

• A.To facilitate synchronization of firmware updates across devices
• B.To allow FortiSwitch to communicate with other FortiSwitche devices in the network.
• C.To ensure accurate time for logs, authentication, and event correlation
• D.To allow FortiSwitch to function in standalone mode if FortiGate becomes unavailable

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibits.
FortiGate RSSO configuration

FortiGate RSSO Group

FortiGate interface configuration

RSSO authentication has been configured on FortiGate. Port3 has been enabled to receive RADIUS accounting messages. Internet access is available through port1. FortiGate is successfully handling incoming RADIUS accounting messages, ensuring that RSSO users are correctly mapped to the RSSO Group user group. The administrator realized that internet access is open to all users and aims to enforce access restrictions, ensuring that only RSSO users are permitted to have internet access. Which configuration change should the administrator apply to address this issue? Response:

• A.Change the RADIUS attribute value setting to match the name of the RADIUS attribute containing the group membership information of the RSSO users.
• B.Modify the firewall policy and add RSSO Group as a Source.
• C.Configure a local user group and manually add users to enforce authentication-based restrictions.
• D.Create a second firewall policy from port3 to port1, and select the target destination subnets.

Comment: *

Name: *

Email: *

Verification: *

What is the primary function of FortiLink NAC in a LAN environment?

• A.To manage FortiSwitch devices and apply manual firewall rules
• B.To extend security policies across FortiGate firewalls only
• C.To ensure devices are manually placed in VLANs based on their user roles
• D.To automate device onboarding and verify security posture

Comment: *

Name: *

Email: *

Verification: *

In a Windows environment using AD machine authentication, how does FortiAuthenticator ensure that a previously authenticated device is maintaining its network access once the device resumes operating after sleep or hibernation?

• A.It temporarily assigns the device to a guest VLAN until full reauthentication is completed.
• B.It sends a wake-on-LAN packet to trigger reauthentication.
• C.It uses machine authentication based on the device IP address.
• D.It caches the MAC address of authenticated devices for a configurable period of time.

Comment: *

Name: *

Email: *

Verification: *