StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Firewall authentication

Practice question 162 of 440 · medium

FortiGate can reach the LDAP server, but a user cannot be located when cnid selects an attribute that does not contain the entered logon name. Which change fits the failure stage?

Choose the single best answer.

  1. A.Enable SNAT on every identity policy
  2. B.Increase the authentication idle timer
  3. C.Use the username attribute matching the entered logon name
  4. D.Add a reverse permit for TCP 389 replies
Show the answer and explanation

✓ Correct answer

  • Use the username attribute matching the entered logon name

A correct identifier attribute lets the search locate the intended entry. Timers and broad NAT changes do not solve a search-attribute mismatch, and reachability is already established.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.