StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · FortiSASE and onboarding

Practice question 96 of 440 · medium

A user completes IdP authentication but receives the wrong private-application access. What is the best next investigation?

Choose the single best answer.

  1. A.SAML group claims and FortiSASE group/policy matching
  2. B.Only renew the access credentials even though the IdP already accepted them
  3. C.Only redistribute the same invitation installer without checking identity claims
  4. D.Only change the chosen PoP without checking group-policy authorization
Show the answer and explanation

✓ Correct answer

  • SAML group claims and FortiSASE group/policy matching

Check group claims and authorization after authentication succeeds. Renewing accepted credentials, reinstalling the same onboarding package or changing service location does not correct the stated group/policy mismatch.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.