Free Fortinet NSE 6 – FortiAuthenticator 6.1 Exam NSE6_FAC-6.1 Exam Practice Test

Which method is the most secure way of delivering FortiToken data once the token has been seeded?

• Online activation of the tokens through the FortiGuard network
• Shipment of the seed files on a CD using a tamper-evident envelope
• Using the in-house token provisioning tool
• Automatic token generation using FortiAuthenticator

Which two capabilities does FortiAuthenticator offer when acting as a self-signed or local CA? (Choose two)

• Validating other CA CRLs using OSCP
• Importing other CA certificates and CRLs
• Merging local and remote CRLs using SCEP
• Creating, signing, and revoking of X.509 certificates

How can a SAML metada file be used?

• To defined a list of trusted user names
• To import the required IDP configuration
• To correlate the IDP address to its hostname
• To resolve the IDP realm for authentication

Which behaviors exist for certificate revocation lists (CRLs) on FortiAuthenticator? (Choose two)

• CRLs contain the serial number of the certificate that has been revoked
• Revoked certificates are automaticlly placed on the CRL
• CRLs can be exported only through the SCEP server
• All local CAs share the same CRLs

What happens when a certificate is revoked? (Choose two)

• Revoked certificates cannot be reinstated for any reason
• All certificates signed by a revoked CA certificate are automatically revoked
• Revoked certificates are automatically added to the CRL
• External CAs will priodically query Fortiauthenticator and automatically download revoked certificates

When you are setting up two FortiAuthenticator devices in active-passive HA, which HA role must you select on the master FortiAuthenticator?

• Active-passive master
• Standalone master
• Cluster member
• Load balancing master

You are the administrator of a large network that includes a large local user datadabase on the current Fortiauthenticatior. You want to import all the local users into a new Fortiauthenticator device.Which method should you use to migrate the local users?

• Import users using RADIUS accounting updates.
• Import the current directory structure.
• Import users from RADUIS.
• Import users using a CSV file.

Which option correctly describes an SP-initiated SSO SAML packet flow for a host without a SAML assertion?

• Service provider contacts idendity provider, idendity provider validates principal for service provider, service provider establishes communication with principal
• Principal contacts idendity provider and is redirected to service provider, principal establishes connection with service provider, service provider validates authentication with identify provider
• Principal contacts service provider, service provider redirects principal to idendity provider, after succesfull authentication identify provider redirects principal to service provider
• Principal contacts idendity provider and authenticates, identity provider relays principal to service provider after valid authentication

Which EAP method is known as the outer authentication method?

• PEAP
• EAP-GTC
• EAP-TLS
• MSCHAPV2

Which two SAML roles can Fortiauthenticator be configured as? (Choose two)

• Idendity provider
• Principal
• Assertion server
• Service provider