Cyber Monday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Fortinet Exam NSE7_LED-7.0 Topic 1 Question 20 Discussion

Actual exam question for Fortinet's NSE7_LED-7.0 exam
Question #: 20
Topic #: 1
[All NSE7_LED-7.0 Questions]

Refer to the exhibit.

Wireless guest users are unable to authenticate because they are getting a certificate error while loading the captive portal login page. This URL string is the HTTPS POST URL guest wireless users see when attempting to access the network using the web browser

Which two settings are the likely causes of the issue? (Choose two.)

Show Suggested Answer Hide Answer
Suggested Answer: A, B

According to the exhibit, the wireless guest users are getting a certificate error while loading the captive portal login page. This means that the browser cannot verify the identity of the server that is hosting the login page. Therefore, option A is true because the external server FQDN is incorrect, which means that it does not match the common name or subject alternative name of the server certificate. Option B is also true because the wireless user's browser is missing a CA certificate, which means that it does not have the root or intermediate certificate that issued the server certificate. Option C is false because the FortiGate authentication interface address is using HTTPS, which is a secure protocol that encrypts the communication between the browser and the server. Option D is false because the user address is not in DDNS form, which is not related to the certificate error.


Contribute your Thoughts:

Lilli
6 months ago
Haha, I bet the Fortinet engineer who set this up is sweating bullets right now. Talk about a classic 'works on my machine' scenario.
upvoted 0 times
...
Leonora
6 months ago
Come on, guys, it's obviously the user address not being in DDNS form. What is this, the dark ages? Get with the times!
upvoted 0 times
Marica
5 months ago
C) The FortiGate authentication interface address is using HTTPS
upvoted 0 times
...
Rhea
5 months ago
B) The wireless user's browser is missing a CA certificate
upvoted 0 times
...
Lindsay
6 months ago
A) The external server FQDN is incorrect
upvoted 0 times
...
...
Cheryl
6 months ago
The FortiGate authentication interface using HTTPS? That's a bit overkill, don't you think? This sounds like a classic case of a misconfigured FQDN.
upvoted 0 times
Lisbeth
5 months ago
Maybe the FQDN is incorrect as well, that could be another reason for the issue.
upvoted 0 times
...
Daniel
6 months ago
Yeah, it might be causing the certificate error for the guest users.
upvoted 0 times
...
Cordell
6 months ago
The FortiGate authentication interface using HTTPS? That does seem excessive.
upvoted 0 times
...
...
Iluminada
7 months ago
I think the wireless user's browser is missing the CA certificate. That could definitely cause a certificate error when trying to access the captive portal.
upvoted 0 times
...
Nelida
7 months ago
Hmm, the certificate error suggests an issue with the server's certificate. I'm guessing the external server FQDN is incorrect, that has to be the culprit.
upvoted 0 times
Lea
6 months ago
B) The wireless user's browser is missing a CA certificate
upvoted 0 times
...
Stefany
6 months ago
A) The external server FQDN is incorrect
upvoted 0 times
...
...

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77