nerdexam
Fortinet

NSE4 · Question #512

When configuring LDAP on the FortiGate as a remote database for users, what is not a part of the configuration?

The correct answer is C. The server secret to allow for remote queries (Primary server secret).. When configuring an LDAP server on FortiGate, common parameters include the user identifier attribute, user/group base DN, and LDAP administrator credentials, but a 'server secret' is not a standard requirement.

Submitted by helene.fr· Apr 18, 2026Firewall and Authentication

Question

When configuring LDAP on the FortiGate as a remote database for users, what is not a part of the configuration?

Options

  • AThe name of the attribute that identifies each user (Common Name Identifier).
  • BThe user account or group element names (user DN).
  • CThe server secret to allow for remote queries (Primary server secret).
  • DThe credentials for an LDAP administrator (password).

How the community answered

(37 responses)
  • A
    8% (3)
  • B
    3% (1)
  • C
    86% (32)
  • D
    3% (1)

Why each option

When configuring an LDAP server on FortiGate, common parameters include the user identifier attribute, user/group base DN, and LDAP administrator credentials, but a 'server secret' is not a standard requirement.

AThe name of the attribute that identifies each user (Common Name Identifier).

The Common Name Identifier (e.g., 'cn' or 'sAMAccountName') is crucial for FortiGate to correctly identify and locate users within the LDAP directory.

BThe user account or group element names (user DN).

The user DN (Distinguished Name) or base DN specifies the starting point in the LDAP directory tree where FortiGate should search for users or groups.

CThe server secret to allow for remote queries (Primary server secret).Correct

LDAP configurations typically require binding credentials (username and password) for an administrator or service account, but there is no standard 'server secret' parameter required for FortiGate to query an LDAP server.

DThe credentials for an LDAP administrator (password).

Credentials for an LDAP administrator (username and password) are necessary for FortiGate to bind to the LDAP server and perform directory queries for user authentication and group membership.

Concept tested: FortiGate LDAP configuration parameters

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/252972/ldap-server

Topics

#LDAP#Authentication#FortiGate Configuration#Remote Authentication

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full NSE4 Practice