Fortinet FCSS_LED_AR-7.6 Value Pack (Frequently Bought Together)

What are three key components of the 802.1X authentication process? (Choose three.)

• A. Supplicant
• B. Authentication Server
• C. Gateway
• D. Authentication Service
• E. Authenticator

Refer to the exhibit. On FortiGate, a RADIUS server is configured to forward authentication requests to FortiAuthenticator, which acts as a RADIUS proxy. FortiAuthenticator then relays these authentication requests to a remote Windows AD server using LDAP.
While testing authentication using the CLI command diagnose test authserver. the administrator observed that authentication succeeded with PAP but failed when using MS-CHAFV2.
Which two solutions can the administrator implement to enable MS-CHAPv2 authentication?
(Choose two.)

• A. Enable RADIUS attribute filtering on FortiAuthenticator.
• B. Configure FortiAuthenticator to use RADIUS instead of LDAP as the back-end authentication server
• C. Enable Windows Active Directory domain authentication on FortiAuthenticator.
• D. Change the FortiGate authentication method to CHAP instead of MS-CHAPv2.

In which two ways is layer 2 isolation applied to a quarantined device? (Choose two.)

• A. By assigning a null route based on the device's IP address.
• B. By blocking communication based on the device's IP address.
• C. By blocking communication based on the device's MAC address.
• D. By configuring route policy rules to restrict traffic.
• E. By assigning the quarantined device to a separate VLAN.

A network administrator is configuring a RADIUS server on FortiGate to authenticate remote users. The administrator configures FortiGate to forward authentication requests to FortiAuthenticator, which then proxies these requests to a Windows Active Directory (AD) server using LDAP.
Which is the primary benefit of using FortiAuthenticator in this configuration?

• A. FortiAuthenticator encrypts the RADIUS authentication traffic between FortiGate and the AD server, securing communication.
• B. This configuration provides a solution to the CHAP-to-LDAP dilemma, enabling MSCHAPv2 authentication.
• C. The configuration allows FortiGate to directly authenticate remote users against Windows Active Directory without the need for an intermediate proxy.
• D. FortiAuthenticator simplifies the configuration by allowing FortiGate to use LDAP directly for authentication without the need for RADIUS.

Refer to the exhibits. The exhibits show the FortiGate logs, widget, and CLI.



Security Fabric quarantine automation is being tested using a device with the IP address
10.0.2.1, which is connected to a managed FortiSwitch.
Shortly after attempting to access a malicious website, the device loses access to the internet and other VLANs within the network. However, it can still communicate with other devices within the same VLAN.
Which configuration change is required to fix the issue?

• A. Adjust the IP Ban settings to the Quarantine action.
• B. Enable intra-VLAN traffic blocking In the Security Fabric quarantine settings.
• C. Replace the IP Ban action with Access Layer Quarantine.
• D. Adjust the indicator of compromise (IOC) on FortiAnalyzer.