An LDAP server has been successfully configured on FortiGate, which forwards authentication requests to a Windows Active Directory (AD) server. Users can authenticate using PAP, but authentication fails with MSCHAPv2. Why is it not recommended to use PAP for authentication?

• A.PAP sends passwords in cleartext.
• B.PAP requires the use of an insecure port that is easily blocked by firewalls.
• C.PAP does not support domain-based authentication for Active Directory.
• D.PAP is only supported for local user accounts, not external authentication sources.

Comment: *

Name: *

Email: *

Verification: *

You are setting up a captive portal to provide Wi-Fi access for visitors. To simplify the process, your team wants visitors to authenticate using their existing social media accounts instead of creating new accounts or entering credentials manually.
Which two actions are required to enable this functionality? (Choose two.)

• A.Configure the social login profiles for the supported platforms.
• B.Configure only the email login option because a social media login cannot be used with captive portals.
• C.Set up a remote open authorization (OAuth) server for each selected social media platform.
• D.Enable Account Login as the authentication type and configure a remote LDAP server.
• E.Set up the FortiAuthenticator internal database as the primary source for user credentials

Comment: *

Name: *

Email: *

Verification: *

Which VLAN is used by FortiGate to place devices that fail to match any configured NAC policies? CRSPAN

• A.NAC
• B.segment
• C.Quarantine
• D.Onboarding

Comment: *

Name: *

Email: *

Verification: *

What role does FortiAuthenticator play in a guest access workflow with FortiGate?
Response:

• A.Authenticates guest users via SMS or email
• B.Captures traffic logs
• C.Acts as a DHCP server
• D.Deploys firmware to clients

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.


A RADIUS server has been successfully configured on FortiGate, which sends RADIUS authentication requests to FortiAuthenticator. FortiAuthenticator, in turn, relays the authentication using LDAP to a Windows Active Directory server.
It was reported that wireless users are unable to authenticate successfully.
The FortiGate configuration confirms that it can connect to the RADIUS server without issues.
While testing authentication on FortiGate using the command diagnose test authserver radius, it was observed that authentication succeeds with PAP but fails with MSCHAPv2.
Additionally, the Remote LDAP Server configuration on FortiAuthenticator was reviewed.
Which configuration change might resolve this issue?

• A.Change the RADIUS authentication protocol to CHAP.
• B.Enable Windows Active Directory Domain Authentication.
• C.Manually add user credentials to the FortiAuthenticator local database.
• D.Use RADIUS attributes under the FortiGate configuration.

Comment: *

Name: *

Email: *

Verification: *