StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Firewall authentication

Practice question 159 of 440 · medium

A user passes an LDAP credential test but cannot match a Finance-only policy. Interfaces and service are correct. What should be checked next?

Choose the single best answer.

  1. A.Check the remote group membership and policy group match
  2. B.Assume every successful LDAP login belongs to the Finance policy group
  3. C.Reset the user password before checking the successful authentication result
  4. D.Increase the authentication timeout to create missing directory membership
Show the answer and explanation

✓ Correct answer

  • Check the remote group membership and policy group match

Successful credential validation does not establish Finance membership. Verify the group constraint; a password reset or longer record lifetime cannot supply membership, and LDAP acceptance does not imply every-group access.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.