Q: 10
Refer to the exhibit, which shows a partial configuration from the remote authentication server.
Why does the FortiGate administrator need this configuration?
Why does the FortiGate administrator need this configuration?Options
Discussion
Fortinet and their weird group mapping again, probably D since filter-id restricts to the "Training" group only.
Probably D for sure, filter-id always means group match not OU.
Config is matching users based on filter-id, so I’m sticking with D. It’s only authenticating the Training user group, not all users or an OU. Pretty clear from how FortiGate does group matching via RADIUS. Anyone see a reason to pick C here?
My pick: C, saw similar phrasing in the official guide and practice exams.
So if the config was using an OU and not the group name in that RADIUS attribute filter, would C actually be correct here?
Why does Fortinet write so many questions that try to trip us up with OU vs group? D tbh
C/D? I think D is right since filter-id is group not OU, C looks like the distractor here.
Not sure C works, looks like trap answer. The config is matching by filter-id, so only the Training user group gets authenticated. If it was matching on OU, then maybe C, but with filter-id set it's D. Someone could easily misread that part though.
D Only the Training user group is authenticated in this config, filter-id ties it to that group specifically.
I don't think it's C here. D fits since the filter-id attribute ties the group directly, not the OU. Some might pick C by mistake if they're thinking about OU matching, but that's not how this config works.
Be respectful. No spam.
