Fortinet NSE6_FAC-6.1 Exam Questions Free Practice Test

Viewing page 1 out of 1 pages

Viewing questions 1-10 out of questions

Questions # 1:

Which option correctly describes an SP-initiated SSO SAML packet flow for a host without a SAML assertion?

Options:

Service provider contacts idendity provider, idendity provider validates principal for service provider, service provider establishes communication with principal

Principal contacts idendity provider and is redirected to serviceprovider, principal establishes connection with service provider, service provider validates authentication with identify provider

Principal contacts service provider, service provider redirects principal to idendity provider, after succesfull authentication identify provider redirects principal to service provider

Principal contacts idendity provider and authenticates, identity provider relays principal to service provider after valid authentication

Expert Solution

Questions # 2:

Which interface services must be enabled for the SCEP client to connect to Authenticator?

Options:

OCSP

REST API

SSH

HTTP/HTTPS

Expert Solution

Questions # 3:

You are a Wi-Fi provider and host multiple domains. How do you delegate user accounts, user groups and permissions per domain when theyare authenticating on a single FortiAuthenticator device?

Options:

Automatically import hosts from each domain as they authenticate

Create multiple directory trees on FortiAuthenticator

Create realms

Create user groups

Expert Solution

Questions # 4:

Which statement about the guest portal policies is true?

Options:

Guest portal policies apply only to authentication requests coming from unknown RADIUS clients

Guest portal policies can be used only for BYODs

Conditions in the policy apply only to guest wireless users

All conditions in the policy must match before a user is presented with the guest portal

Expert Solution

Questions # 5:

Which FSSO discovery method transparently detects logged off users without having to rely on external features such as WMI polling?

Options:

Windows AD polling

FortiClient SSO Mobility Agent

Radius Accounting

DC Polling

Expert Solution

Questions # 6:

Which three of the following can be used as SSO sources? (Choose three)

Options:

FortiClient SSO Mobility Agent

SSH Sessions

FortiAuthenticator in SAML SP role

Fortigate

RADIUS accounting

Expert Solution

Questions # 7:

Which two statement about the RADIUS service on FortiAuthenticator are true? (Choose two)

Options:

Two-factor authentication cannot be enforced when using RADIUS authentication

RADIUS users can migrated to LDAP users

Only local users can be authenticated through RADIUS

FortiAuthenticator answers only to RADIUS client that are registered with FortiAuthenticator

Expert Solution

Questions # 8:

Which two features of FortiAuthenticator are used for EAP deployment? (Choose two)

Options:

Certificate authority

LDAP server

MAC authentication bypass

RADIUS server

Expert Solution

Questions # 9:

Which two capabilities does FortiAuthenticator offer when acting as a self-signed or local CA? (Choose two)

Options:

Validating other CA CRLs using OSCP

Importing other CA certificates and CRLs

Merging local and remote CRLs using SCEP

Creating, signing, and revoking of X.509 certificates

Expert Solution

Viewing page 1 out of 1 pages

Viewing questions 1-10 out of questions

Pass the Fortinet NSE 6 Network Security Specialist NSE6_FAC-6.1 Questions and answers with CertsForce