StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Firewall authentication

Practice question 170 of 440 · hard

A valid RADIUS response is Access-Accept with a remote group value that does not match the firewall group constraint. What should be corrected?

Choose the single best answer.

  1. A.Disable all remote group restrictions because Access-Accept grants every group
  2. B.Reset the valid password while retaining the mismatched group constraint
  3. C.Correct the remote group/VSA match used for authorization
  4. D.Increase the idle timeout without changing the returned group value
Show the answer and explanation

✓ Correct answer

  • Correct the remote group/VSA match used for authorization

The returned group must satisfy the policy authorization constraint. Removing all restrictions broadens access beyond the requirement; password and timer changes do not repair the group-string mismatch.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.