NSE7_LED-7.0 無料問題集「Fortinet NSE 7 - LAN Edge 7.0」

（A）It enables FortiAuthenticator to import users from Windows AD

（B）It enables FortiAuthenticator to use Windows administrator credentials to perform an LDAP lookup for a user search

（C）It enables FortiAuthenticator to use a Windows CA certificate when authenticating RADIUS users

（D）It enables FortiAuthenticator to register itself as a Windows trusted device to proxy authentication using Kerberos

（A）FortiSwitch manager is working in central management mode

（B）FortiSwitch is authorized and offline

（C）FortiSwitch manager is working in per-device management mode

（D）FortiSwitch is not authorized

（A）In the IKE section of the IPsec VPN tunnel in the Mode field select Main (ID protection)

（B）Create a PKI user for the IPsec VPN user, and then configure the IPsec VPN tunnel to accept the PKI user as peer certificate

（C）In the Authentication section of the IPsec VPN tunnel in the Method drop-down list select Signature and then select the certificate that FortiGate will use for IPsec VPN

（D）Enable XAUTH on the IPsec VPN tunnel

（E）Import the CA that signed the user certificate

（A）If the administrator makes any changes on FortiSwitch manager they must also install those changes on FortiGate so that those changes are applied on the managed switches

（B）FortiManager obtains the FortiSwitch status information by querying the FortiGate REST API every three minutes

（C）Per-device management is the default management mode on FortiManager

（D）Any switch discovered or authorized on FortiGate must be added manually on FortiSwitch manager