Fortinet Exam NSE7_LED-7.0 Topic 1 Question 41 Discussion

Actual exam question for Fortinet's NSE7_LED-7.0 exam

Question #: 41
Topic #: 1

Refer to the exhibit.

Examine the FortiGate logs, widget, and CLI output shown in the exhibit.

An administrator is testing the Security Fabric quarantine automation. The test device (10.0.2.2) is connected to a managed FortiSwitch device.

A few seconds after trying to access a malicious website from the test device, the test device can no longer access the internet and other VLANs in the network. However, the device is still able to access other devices in the same VLAN.

Based on the information shown in the exhibit, which modification should the administrator make to fix the problem?

AConfigure a firewall policy on FortiGate to block the intra-VLAN traffic.

BChange the quarantine mode to by VLAN mode.

CEnable the access layer quarantine action on the Quarantine_Devices automation stitch.

DChange the quarantine mode to by redirect mode.

Show Suggested Answer

Suggested Answer: C

by Isabella at May 03, 2025, 01:32 AM

Limited Time Offer

25%

Off

Get Premium NSE7_LED-7.0 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Thomasena

2 months ago

C is the way to go. The exhibit clearly shows the device is still connected to the VLAN, so the problem must be with the quarantine action, not the mode. Nice try, though, Miss!

upvoted 0 times

...

Ammie

2 months ago

Haha, looks like the admin needs to brush up on their Fortinet knowledge. I bet they're wishing they had a magic 8-ball to help them figure this one out!

upvoted 0 times

Naomi

28 days ago

D) Change the quarantine mode to by redirect mode.

upvoted 0 times

...

Dona

2 months ago

C) Enable the access layer quarantine action on the Quarantine_Devices automation stitch.

upvoted 0 times

...

Albina

2 months ago

B) Change the quarantine mode to by VLAN mode.

upvoted 0 times

...

Tayna

2 months ago

A) Configure a firewall policy on FortiGate to block the intra-VLAN traffic.

upvoted 0 times

...

Jess

2 months ago

I think configuring a firewall policy on FortiGate to block the intra-VLAN traffic might be necessary to resolve the issue.

upvoted 0 times

...

Stanford

2 months ago

I believe enabling the access layer quarantine action on the Quarantine_Devices automation stitch could also fix the problem.

upvoted 0 times

...

Miss

3 months ago

D looks like the correct answer to me. The question states that the device can't access the internet or other VLANs, but can still access devices in the same VLAN, which suggests a 'by redirect' quarantine mode issue.

upvoted 0 times

Roxane

2 months ago

Yes, D makes sense based on the scenario described.

upvoted 0 times

...

Kristel

2 months ago

I agree, D seems like the best option here.

upvoted 0 times

...

Kenda

3 months ago

I agree with Marta. Changing the quarantine mode to by VLAN mode seems like the right solution.

upvoted 0 times

...

Tommy

3 months ago

I think the answer is C. The exhibit shows that the device can still access other devices in the same VLAN, so the issue is with the quarantine action, not the VLAN itself. Enabling the access layer quarantine action should fix the problem.

upvoted 0 times