Fortinet Exam NSE7_LED-7.0 Topic 1 Question 16 Discussion

Actual exam question for Fortinet's NSE7_LED-7.0 exam

Question #: 16
Topic #: 1

Refer to the exhibit.

Wireless guest users are unable to authenticate because they are getting a certificate error while loading the captive portal login page. This URL string is the HTTPS POST URL guest wireless users see when attempting to access the network using the web browser

Which two settings are the likely causes of the issue? (Choose two.)

AThe external server FQDN is incorrect

BThe wireless user's browser is missing a CA certificate

CThe FortiGate authentication interface address is using HTTPS

DThe user address is not in DDNS form

Show Suggested Answer

Suggested Answer: A, B

According to the exhibit, the wireless guest users are getting a certificate error while loading the captive portal login page. This means that the browser cannot verify the identity of the server that is hosting the login page. Therefore, option A is true because the external server FQDN is incorrect, which means that it does not match the common name or subject alternative name of the server certificate. Option B is also true because the wireless user's browser is missing a CA certificate, which means that it does not have the root or intermediate certificate that issued the server certificate. Option C is false because the FortiGate authentication interface address is using HTTPS, which is a secure protocol that encrypts the communication between the browser and the server. Option D is false because the user address is not in DDNS form, which is not related to the certificate error.

by Frederica at Apr 12, 2024, 07:15 PM

Limited Time Offer

25%

Off

Get Premium NSE7_LED-7.0 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Denny

5 days ago

I don't think the user address being in DDNS form has anything to do with this. That seems irrelevant to the certificate error problem. Let's focus on the SSL/TLS configuration and the CA certificate.

upvoted 0 times

...

Deonna

5 days ago

I agree with the other candidates. The certificate error is a clear indicator of an SSL/TLS configuration problem. I'm curious to know if the admin tried to use a self-signed certificate or if there's an issue with the way the certificate was deployed. Either way, B and C seem like the most likely answers here.

upvoted 0 times

...

Rory

6 days ago

Haha, imagine if the issue was because the admin set the FQDN to 'www.notavirus.com' - that would be a real head-scratcher! But seriously, I think Floyd and Cassi are on the right track. The certificate issue is the most likely culprit here. We need to double-check the SSL/TLS settings and make sure the users have the required CA certificates installed.

upvoted 0 times

...

Jacqueline

7 days ago

You know, that's a good point. If the wireless users' browsers don't have the right CA certificate installed, that would definitely cause the issue we're seeing. I bet that's one of the two settings we're looking for.

upvoted 0 times

...

Cassi

7 days ago

I agree with Floyd. The certificate error suggests an issue with the SSL/TLS configuration. The external server FQDN and DDNS form don't seem to be the problem here. We need to ensure the captive portal is properly configured with a valid SSL/TLS certificate that the client browsers can trust.

upvoted 0 times

...

Floyd

8 days ago

Hmm, this is an interesting question. I think the likely causes are B) The wireless user's browser is missing a CA certificate, and C) The FortiGate authentication interface address is using HTTPS. If the captive portal is using HTTPS, then the user's browser needs to trust the certificate, otherwise they'll get the certificate error.

upvoted 0 times

...

Earnestine

8 days ago

Hmm, I'm not so sure about that. What if the wireless user's browser is missing the CA certificate? That could also cause a certificate error, couldn't it?

upvoted 0 times

...

Lashawn

9 days ago

I agree, the SSL/TLS configuration is probably the culprit here. My money is on the external server FQDN being incorrect and the FortiGate authentication interface address using HTTPS. That would explain the certificate error.

upvoted 0 times

...

Vincenza

11 days ago

Okay, let's think this through step-by-step. The issue is that the wireless guest users are getting a certificate error when trying to access the captive portal login page. That sounds like it could be a problem with the SSL/TLS configuration.

upvoted 0 times

...

Glory

13 days ago

Ugh, this question is so tricky. I've seen issues like this before, and it can be a real pain to troubleshoot. I'm not sure which two settings are the likely causes, but I'm going to give it my best shot.

upvoted 0 times

...