Official Bank 0/30

Fortinet NSE 7 – Secure Access 6.2 Exam (NSE7_SAC-6.2) - Fortinet Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
30 Total Questions
1
Question
Refer to the exhibit.

Exhibit

The exhibit shows a network topology and SSID settings. FortiGate is configured to use an external captive portal. However, wireless users are not able to see the captive portal login page. Which configuration change should the administrator make to fix the problem?
Options
A Remove guest.portal user group in the firewall policy.
B Create a firewall policy to allow traffic from the Guest SSID to FortiAuthenticator and Windows AD devices.
C FortiAuthenticator and WindowsAD address objects should be added as exempt sources.
D Enable the captive-portal-exempt option in the firewall policy with the ID 10.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
Which CLI command should an administrator use to view the certificate validation process in real- time?
Options
A diagnose debug application authd -1
B diagnose debug application certd -1
C diagnose debug application foauthd -1
D diagnose debug application fnbamd -1
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
Refer to the exhibit.

Exhibit

Examine the partial debug output shown in the exhibit. Which two statements about the debug output are true? (Choose two.)
Select 2
Options
A The LDAP server is configured to use regular bind.
B The connection to the LDAP server timed out.
C The user authenticated successfully.
D The debug output shows multiple user authentications.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
Refer to the exhibit.

Exhibit

The exhibit shows two FortiGate devices in active-passive HA mode, including four FortiSwitch devices connected to a ring. Which two configurations are required to deploy this network topology'' (Choose two.)
Select 2
Options
A Enable f ortilink-split-interf ace on the FortiLink interfaces.
B Configure link aggregation interfaces on the FortiLink interfaces.
C Configure the trunk interfaces on the FortiSwitch devices as MCLAG-ISL.
D Enable STP on the FortiGate interfaces.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
Refer to the exhibit.

Exhibit

Given the network topology shown in the exhibit, which two ports should be configured as untrusted DHCP ports? (Choose two.)
Select 2
Options
A FortiSwitch B, port1
B FortiSwitch B, port2
C FortiSwitch A, port1
D FortiSwitch A, port2
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.