Free Fortinet NSE 6 – FortiAuthenticator 6.4 Exam NSE6_FAC-6.4 Exam Practice Test

Which option correctly describes an SP-initiated SSO SAML packet flow for a host without a SAML assertion?

• Service provider contacts idendity provider, idendity provider validates principal for service provider, service provider establishes communication with principal
• Principal contacts idendity provider and is redirected to service provider, principal establishes connection with service provider, service provider validates authentication with identify provider
• Principal contacts service provider, service provider redirects principal to idendity provider, after succesfull authentication identify provider redirects principal to service provider
• Principal contacts idendity provider and authenticates, identity provider relays principal to service provider after valid authentication

Which method is the most secure way of delivering FortiToken data once the token has been seeded?

• Online activation of the tokens through the FortiGuard network
• Shipment of the seed files on a CD using a tamper-evident envelope
• Using the in-house token provisioning tool
• Automatic token generation using FortiAuthenticator

Which statement about the assignment of permissions for sponsor and administrator accounts is true?

• Only administrator accounts permissions are assigned using admin profiles.
• Sponsor permissions are assigned using group settings.
• Administrator capabilities are assigned by applying permission sets to admin groups.
• Both sponsor and administrator account permissions are assigned using admin profiles.

Which EAP method is known as the outer authentication method?

• PEAP
• EAP-GTC
• EAP-TLS
• MSCHAPV2

An administrator is integrating FortiAuthenticator with an existing RADIUS server with the intent of eventually replacing the RADIUS server with FortiAuthenticator.How can FortiAuthenticator help facilitate this process?

• By configuring the RADIUS accounting proxy
• By enabling automatic REST API calls from the RADIUS server
• By enabling learning mode in the RADIUS server configuration
• By importing the RADIUS user records

Which behaviors exist for certificate revocation lists (CRLs) on FortiAuthenticator? (Choose two)

• CRLs contain the serial number of the certificate that has been revoked
• Revoked certificates are automaticlly placed on the CRL
• CRLs can be exported only through the SCEP server
• All local CAs share the same CRLs

You are an administrator for a large enterprise and you want to delegate the creation and management of guest users to a group of sponsors.How would you associate the guest accounts with individual sponsors?

• As an administrator, you can assign guest groups to individual sponsors.
• Guest accounts are associated with the sponsor that creates the guest account.
• You can automatically add guest accounts to groups associated with specific sponsors.
• Select the sponsor on the guest portal, during registration.

Which three of the following can be used as SSO sources? (Choose three)

• FortiClient SSO Mobility Agent
• SSH Sessions
• FortiAuthenticator in SAML SP role
• Fortigate
• RADIUS accounting

When configuring syslog SSO, which three actions must you take, in addition to enabling the syslog SSO method? (Choose three.)

• Enable syslog on the FortiAuthenticator interface.
• Define a syslog source.
• Select a syslog rule for message parsing.
• Set the same password on both the FortiAuthenticator and the syslog server.
• Set the syslog UDP port on FortiAuthenticator.

At a minimum, which two configurations are required to enable guest portal services on FortiAuthenticator? (Choose two)

• Configuring a portal policy
• Configuring at least on post-login service
• Configuring a RADIUS client
• Configuring an external authentication portal