Fortinet Exam NSE7_LED-7.0 Topic 1 Question 14 Discussion

Actual exam question for Fortinet's NSE7_LED-7.0 exam

Question #: 14
Topic #: 1

Refer to the exhibit.

Wireless guest users are unable to authenticate because they are getting a certificate error while loading the captive portal login page. This URL string is the HTTPS POST URL guest wireless users see when attempting to access the network using the web browser

Which two settings are the likely causes of the issue? (Choose two.)

AThe external server FQDN is incorrect

BThe wireless user's browser is missing a CA certificate

CThe FortiGate authentication interface address is using HTTPS

DThe user address is not in DDNS form

Show Suggested Answer

Suggested Answer: A, B

According to the exhibit, the wireless guest users are getting a certificate error while loading the captive portal login page. This means that the browser cannot verify the identity of the server that is hosting the login page. Therefore, option A is true because the external server FQDN is incorrect, which means that it does not match the common name or subject alternative name of the server certificate. Option B is also true because the wireless user's browser is missing a CA certificate, which means that it does not have the root or intermediate certificate that issued the server certificate. Option C is false because the FortiGate authentication interface address is using HTTPS, which is a secure protocol that encrypts the communication between the browser and the server. Option D is false because the user address is not in DDNS form, which is not related to the certificate error.

by Jesusa at Mar 07, 2024, 05:33 AM

Limited Time Offer

25%

Off

Get Premium NSE7_LED-7.0 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tamar

8 days ago

Haha, I love how this exam question is trying to trick us. 'Wireless guest users are unable to authenticate' - that's like the IT version of 'the dog ate my homework'! But in all seriousness, I agree with Desirae and 2 that the missing CA certificate and the HTTPS interface are the likely culprits here.

upvoted 0 times

...

Dean

9 days ago

Hmm, I'm not so sure about option C. Using HTTPS for the authentication interface is actually a good practice to ensure secure communication. I think the real issue here is with the external server FQDN being incorrect, as mentioned in option A. That could definitely cause the certificate error.

upvoted 0 times

...

Elsa

10 days ago

I agree with you, Desirae. The certificate error suggests that the browser is not able to verify the certificate used by the captive portal. So the missing CA certificate is probably the culprit here. And using HTTPS for the authentication interface could also be causing issues, since the user's browser may not trust the certificate.

upvoted 0 times

...

Desirae

11 days ago

Hmm, this is an interesting question. The issue seems to be with the captive portal login page not loading properly due to a certificate error. Based on the options provided, I think the likely causes are B) the wireless user's browser is missing a CA certificate, and C) the FortiGate authentication interface address is using HTTPS.

upvoted 0 times

...