Which statement correctly describes the guest portal behavior on FortiAuthenticator?

• A.Sponsored accounts cannot authenticate using guest portals.
• B.FortiAuthenticator uses POST parameters and a RADIUS client configuration to map the request to a guest portal for authentication.
• C.All guest accounts must be activated using SMS or email activation codes.
• D.All self-registered and sponsored accounts are listed on the local Users GUI page on FortiAuthenticator.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit showing a network topology and SSID settings. FortiGate is configured to use an external captive portal. However, wireless users are not able to see the captive portal login page.
Which configuration change should the administrator make to fix the problem?

• A.Enable NAT in the firewall policy with the ID 13.
• B.Add the FortiAuthenticator and WindowsAD address objects as exempt destinations services.
• C.Enable the captive-portal-exempt option in the firewall policy with the ID 12.
• D.Remove the guest.portal user group in the firewall policy with the ID 12.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit. Examine the IPsec VPN phase 1 configuration shown in the exhibit. An administrator wants to use certificate-based authentication for an IPsec VPN user.
Which three configuration changes must you make on FortiGate to perform certificate-based authentication for the IPsec VPN user? (Choose three)

• A.Enable XAUTH on the IPsec VPN tunnel
• B.Import the CA that signed the user certificate
• C.Create a PKI user for the IPsec VPN user, and then configure the IPsec VPN tunnel to accept the PKI user as peer certificate
• D.In the Authentication section of the IPsec VPN tunnel in the Method drop-down list select Signature and then select the certificate that FortiGate will use for IPsec VPN
• E.In the IKE section of the IPsec VPN tunnel in the Mode field select Main (ID protection)

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibits

The exhibits show the wireless network (VAP) SSID profiles defined on FortiManager and an AP profile assigned to a group of APs that are supported by FortiGate None of the APs are broadcasting the SSlDs defined by the AP profile Which changes do you need to make to enable the SSIDs to broadcast?

• A.Enable multiple channels in the Channels section and enable Radio Resource Provision
• B.In the SSIDs section enable Tunnel
• C.In the SSIDs section enable Manual and assign the networks manually
• D.Enable one channel in the Channels section

Comment: *

Name: *

Email: *

Verification: *