Fortinet NSE 7 - Secure Access 6.2 - NSE7_SAC-6.2 Exam Questions [2026]

QUESTION NO: 1
Which two EAP methods can use MSCHAP2 for client authentication? (Choose two.)

A. EAP-TLS B. EAP-TTLS C. EAP-GTC D. GPEAP

Correct Answer: A,C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 2
Which statement correctly describes the guest portal behavior on FortiAuthenticator?

A. All guest accounts must be activated using SMS or email activation codes. B. Sponsored accounts cannot authenticate using guest portals. C. FortiAuthenticator uses POST parameters and a RADIUS client configuration to map the request to a guest portal for authentication. D. All self-registered and sponsored accounts are listed on the local Users GUI page on FortiAuthenticator.

Correct Answer: B

QUESTION NO: 3
Refer to the exhibit.

Examine the packet capture shown in the exhibit, which contains a RADIUS access request packet sent by FortiSwitch to a RADIUS server.
Why does the User-Name field in the RADIUS access request packet contain a MAC address?

A. FortiSwitch authenticates itself using its MAC address as the user name. B. The FortiSwitch interface is configured for 802 IX port authentication with MAC address bypass, andthe connected device does not support 802.1X. C. FortiSwitch is replying to an access challenge packet sent by the RADIUS server and requesting the client MAC address. D. The connected device is doing machine authentication

Correct Answer: C