StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Firewall authentication

Practice question 164 of 440 · medium

An LDAP service supports both STARTTLS and LDAPS, with required ports reachable. Policy requires encrypted directory transport. Which two choices meet that requirement? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Plain LDAP with a longer password
  2. B.STARTTLS according to the server configuration
  3. C.LDAPS with appropriate certificate validation
  4. D.An FQDN source address object
Show the answer and explanation

✓ Correct answers

  • STARTTLS according to the server configuration
  • LDAPS with appropriate certificate validation

STARTTLS and LDAPS provide TLS transport. Password length and firewall address-object type do not encrypt plain LDAP transport.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.