Free Fortinet NSE 6 – FortiAuthenticator 6.4 Exam NSE6_FAC-6.4 Exam Practice Test

An administrator has an active directory (AD) server integrated with FortiAuthenticator. They want members of only specific AD groups to participate in FSSO with their corporate FortiGate firewalls.How does the administrator accomplish this goal?

• Configure a FortiGate filter on FortiAuthenticatoc
• Configure a domain groupings list to identify the desired AD groups.
• Configure fine-grained controls on FortiAuthenticator to designate AD groups.
• Configure SSO groups and assign them to FortiGate groups.

Which method is the most secure way of delivering FortiToken data once the token has been seeded?

• Online activation of the tokens through the FortiGuard network
• Shipment of the seed files on a CD using a tamper-evident envelope
• Using the in-house token provisioning tool
• Automatic token generation using FortiAuthenticator

How can a SAML metada file be used?

• To defined a list of trusted user names
• To import the required IDP configuration
• To correlate the IDP address to its hostname
• To resolve the IDP realm for authentication

A digital certificate, also known as an X.509 certificate, contains which two pieces of information? (Choose two.)

• Issuer
• Shared secret
• Public key
• Private key

When you are setting up two FortiAuthenticator devices in active-passive HA, which HA role must you select on the master FortiAuthenticator?

• Active-passive master
• Standalone master
• Cluster member
• Load balancing master

A system administrator wants to integrate FortiAuthenticator with an existing identity management system with the goal of authenticating and deauthenticating users into FSSO.What feature does FortiAuthenticator offer for this type of integration?

• The ability to import and export users from CSV files
• RADIUS learning mode for migrating users
• REST API
• SNMP monitoring and traps

What are three key features of FortiAuthenticator? (Choose three)

• Identity management device
• Log server
• Certificate authority
• Portal services
• RSSO Server

When generating a TOTP for two-factor authentication, what two pieces of information are used by the algorithm to generate the TOTP?

• UUID and time
• Time and seed
• Time and mobile location
• Time and FortiAuthenticator serial number

Which FSSO discovery method transparently detects logged off users without having to rely on external features such as WMI polling?

• Windows AD polling
• FortiClient SSO Mobility Agent
• Radius Accounting
• DC Polling

Which statement about the assignment of permissions for sponsor and administrator accounts is true?

• Only administrator accounts permissions are assigned using admin profiles.
• Sponsor permissions are assigned using group settings.
• Administrator capabilities are assigned by applying permission sets to admin groups.
• Both sponsor and administrator account permissions are assigned using admin profiles.