Fortinet Exam NSE7_LED-7.0 Topic 1 Question 14 Discussion

Actual exam question for Fortinet's NSE7_LED-7.0 exam

Question #: 14
Topic #: 1

Refer to the exhibit.

Wireless guest users are unable to authenticate because they are getting a certificate error while loading the captive portal login page. This URL string is the HTTPS POST URL guest wireless users see when attempting to access the network using the web browser

Which two settings are the likely causes of the issue? (Choose two.)

AThe external server FQDN is incorrect

BThe wireless user's browser is missing a CA certificate

CThe FortiGate authentication interface address is using HTTPS

DThe user address is not in DDNS form

Show Suggested Answer

Suggested Answer: A, B

According to the exhibit, the wireless guest users are getting a certificate error while loading the captive portal login page. This means that the browser cannot verify the identity of the server that is hosting the login page. Therefore, option A is true because the external server FQDN is incorrect, which means that it does not match the common name or subject alternative name of the server certificate. Option B is also true because the wireless user's browser is missing a CA certificate, which means that it does not have the root or intermediate certificate that issued the server certificate. Option C is false because the FortiGate authentication interface address is using HTTPS, which is a secure protocol that encrypts the communication between the browser and the server. Option D is false because the user address is not in DDNS form, which is not related to the certificate error.

by Jesusa at Mar 07, 2024, 05:33 AM

Limited Time Offer

25%

Off

Get Premium NSE7_LED-7.0 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Bulah

5 months ago

Yes, that's a good point. It's important to check both settings.

upvoted 0 times

...

Elinore

5 months ago

But what about the browser missing a CA certificate? Could that also be a likely cause?

upvoted 0 times

...

Sheridan

5 months ago

I agree, that could definitely cause a certificate error.

upvoted 0 times

...

Cletus

5 months ago

I think the issue might be with the external server FQDN being incorrect.

upvoted 0 times

...

Han

5 months ago

I believe the FortiGate authentication interface address using HTTPS could also be a factor.

upvoted 0 times

...

Tracie

6 months ago

But what about the wireless user's browser missing a CA certificate? That could also be a possible cause.

upvoted 0 times

...

Vinnie

6 months ago

I agree with Hector. That could be one of the causes.

upvoted 0 times

...

Hector

6 months ago

I think the issue might be with the external server FQDN being incorrect.

upvoted 0 times

...

Tamar

7 months ago

Haha, I love how this exam question is trying to trick us. 'Wireless guest users are unable to authenticate' - that's like the IT version of 'the dog ate my homework'! But in all seriousness, I agree with Desirae and 2 that the missing CA certificate and the HTTPS interface are the likely culprits here.

upvoted 0 times

...

Dean

7 months ago

Hmm, I'm not so sure about option C. Using HTTPS for the authentication interface is actually a good practice to ensure secure communication. I think the real issue here is with the external server FQDN being incorrect, as mentioned in option A. That could definitely cause the certificate error.

upvoted 0 times

Harrison

7 months ago

upvoted 0 times

...

Paris

7 months ago

B) The wireless user's browser is missing a CA certificate

upvoted 0 times

...

Ty

7 months ago

A) The external server FQDN is incorrect

upvoted 0 times

...

Elsa

7 months ago

I agree with you, Desirae. The certificate error suggests that the browser is not able to verify the certificate used by the captive portal. So the missing CA certificate is probably the culprit here. And using HTTPS for the authentication interface could also be causing issues, since the user's browser may not trust the certificate.

upvoted 0 times

...

Desirae

7 months ago

Hmm, this is an interesting question. The issue seems to be with the captive portal login page not loading properly due to a certificate error. Based on the options provided, I think the likely causes are B) the wireless user's browser is missing a CA certificate, and C) the FortiGate authentication interface address is using HTTPS.

upvoted 0 times

...