Summer Special 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: bestdeal

Free Fortinet NSE7_LED-7.0 Practice Exam with Questions & Answers | Set: 2

Questions 11

Which two statements about FortiSwitchmanager are true1? (Choose two)

Options:
A.

Per-device management is the default management mode on FortiManager

B.

FortiManager obtains the FortiSwitch status information by querying the FortiGate REST API every three minutes

C.

If the administrator makes any changes on FortiSwitch manager they must also install those changes on FortiGate so that those changes are applied on the managed switches

D.

Any switch discovered or authorized on FortiGate must be added manually on FortiSwitch manager

Fortinet NSE7_LED-7.0 Premium Access
Questions 12

Refer to the exhibit.

Examine the FortiGate logs, widget, and CLI output shown in the exhibit.

NSE7_LED-7.0 Question 12

An administrator is testing the Security Fabric quarantine automation. The test device (10.0.2.2) is connected to a managed FortiSwitch device.

A few seconds after trying to access a malicious website from the test device, the test device can no longer access the internet and other VLANs in the network. However, the device is still able to access other devices in the same VLAN.

Based on the information shown in the exhibit, which modification should the administrator make to fix the problem?

Options:
A.

Configure a firewall policy on FortiGate to block the intra-VLAN traffic.

B.

Change the quarantine mode to by VLAN mode.

C.

Enable the access layer quarantine action on the Quarantine_Devices automation stitch.

D.

Change the quarantine mode to by redirect mode.

Questions 13

Refer to the exhibit

NSE7_LED-7.0 Question 13

Examine the sections of the configuration shown in the output

What action will FortiGate take when verifying the student certificate through OCSP?

Options:
A.

Reject the student certificate if the OCSP server replies that the student certificate status is unknown

B.

Not verify the OCSP server certificate

C.

Use the OCSP URL included in the student certificate to verify the student certificate

D.

Consider the student certificate status as valid if the OCSP server is unreachable

Questions 14

Which two statements about the use of digital certificates are true? (Choose two.)

Options:
A.

A chain of trust may include one or more intermediate CAs.

B.

In a chain of trust, the root CA is signed by another certificate.

C.

To validate the signature on a certificate, an endpoint does not need to know the CA of that certificate.

D.

An intermediate CA can sign other certificates.

Questions 15

Which three protocols are used for controlling FortiSwitch devices on FortiGate? (Choose three.)

Options:
A.

HTTPS

B.

CAPWAP

C.

IGMP

D.

FTP

E.

FortiLink

Exam Code: NSE7_LED-7.0
Certification Provider: Fortinet
Exam Name: Fortinet NSE 7 - LAN Edge 7.0
Last Update: Jul 15, 2025
Questions: 61
PDF + Testing Engine
$164.99
$66
Testing Engine
$124.99
$50
PDF (Q&A)
$104.99
$42