Fortinet NSE6_FAC-6.1 Test Engine Practice Test Questions, Exam Dumps [Q14-Q31]

QUESTION 14
Which FSSO discovery method transparently detects logged off users without having to rely on external features such as WMI polling?

Windows AD polling

FortiClient SSO Mobility Agent

Radius Accounting

DC Polling

QUESTION 15
Which two are supported captive or guest portal authentication methods? (Choose two)

Linkedln

Apple ID

Instagram

QUESTION 16
Which two statement about the RADIUS service on FortiAuthenticator are true? (Choose two)

Two-factor authentication cannot be enforced when using RADIUS authentication

RADIUS users can migrated to LDAP users

Only local users can be authenticated through RADIUS

FortiAuthenticator answers only to RADIUS client that are registered with FortiAuthenticator

QUESTION 17
You are the administrator of a large network that includes a large local user datadabase on the current Fortiauthenticatior. You want to import all the local users into a new Fortiauthenticator device.
Which method should you use to migrate the local users?

Import users using RADIUS accounting updates.

Import the current directory structure.

Import users fromRADUIS.

Import users using a CSV file.

QUESTION 18
What are three key features of FortiAuthenticator? (Choose three)

Identity management device

Log server

Certificate authority

Portal services

RSSO Server

QUESTION 19
What happens when a certificate is revoked? (Choose two)

Revoked certificates cannot be reinstated for any reason

All certificates signed by a revoked CA certificate are automatically revoked

Revoked certificates are automatically added to the CRL

External CAs will priodically query Fortiauthenticator and automatically download revoked certificates

QUESTION 20
You are a Wi-Fi provider and host multiple domains. How do you delegate user accounts, user groups and permissions per domain when theyare authenticating on a single FortiAuthenticator device?

Automatically import hosts from each domain as they authenticate

Create multiple directory trees on FortiAuthenticator

Create realms

Create user groups

QUESTION 21
Which two capabilities does FortiAuthenticator offer when acting as a self-signed or local CA? (Choose two)

Validating other CA CRLs using OSCP

Importing other CA certificates and CRLs

Merging local and remote CRLs using SCEP

Creating, signing, and revoking of X.509 certificates

QUESTION 22
Which two SAML roles can Fortiauthenticator be configured as? (Choose two)

Idendity provider

Principal

Assertion server

Service provider

QUESTION 23
Which two features of FortiAuthenticator are used for EAP deployment? (Choose two)

Certificate authority

LDAP server

MAC authentication bypass

RADIUS server

QUESTION 24
Which behaviors exist for certificate revocation lists (CRLs) on FortiAuthenticator? (Choose two)

CRLs contain the serial number of the certificate that has been revoked

Revoked certificates are automaticlly placed on the CRL

CRLs can beexported only through the SCEP server

All local CAs share the same CRLs

QUESTION 25
Which option correctly describes an SP-initiated SSO SAML packet flow for a host without a SAML assertion?

Service provider contacts idendity provider, idendity provider validates principal for service provider, service provider establishes communication with principal

Principal contacts idendity provider and is redirected to serviceprovider, principal establishes connection with service provider, service provider validates authentication with identify provider

Principal contacts service provider, service provider redirects principal to idendity provider, after succesfull authentication identify provider redirects principal to service provider

Principal contacts idendity provider and authenticates, identity provider relays principal to service provider after valid authentication

Leave a Reply Cancel reply