Fortinet NSE6_FAC-6.1 Online Practice Questions and Exam Preparation

Fortinet NSE6_FAC-6.1 Online Questions & Answers

• Question 1:

  Which option correctly describes an SP-initiated SSO SAML packet flow for a host without a SAML assertion?

  A. Service provider contacts idendity provider, idendity provider validates principal for service provider, service provider establishes communication with principal
  B. Principal contacts idendity provider and is redirected to serviceprovider, principal establishes connection with service provider, service provider validates authentication with identify provider
  C. Principal contacts service provider, service provider redirects principal to idendity provider, after succesfull authentication identify provider redirects principal to service provider
  D. Principal contacts idendity provider and authenticates, identity provider relays principal to service provider after valid authentication
  C. Principal contacts service provider, service provider redirects principal to idendity provider, after succesfull authentication identify provider redirects principal to service provider

• Question 2:

  A device or useridentity cannot be established transparently, such as with non-domain BYOD devices, and allow users to create their own credentialis.

  In this case, which user idendity discovery method can Fortiauthenticator use?

  A. Syslog messaging or SAML IDP
  B. Kerberos-base authentication
  C. Radius accounting
  D. Portal authentication
  D. Portal authentication

• Question 3:

  Which two statements about the self-service portal are true? (Choose two)

  A. Self-registration information can be sent to the user through email or SMS
  B. Realms can be used to configure which seld-registeredusers or groups can authenticate on the network
  C. Administrator approval is required for all self-registration
  D. Authenticating users must specify domain name along with username
  A. Self-registration information can be sent to the user through email or SMS
  B. Realms can be used to configure which seld-registeredusers or groups can authenticate on the network

• Question 4:

  Which network configuration is required when deploying FortiAuthenticator for portal services?

  A. FortiAuthenticator must have the REST API access enable on port1
  B. One of the DNS servers must be a FortiGuard DNS server
  C. Fortigate must be setup as default gateway for FortiAuthenticator
  D. Policies must have specific ports open between FortiAuthenticator and the authentication clients
  D. Policies must have specific ports open between FortiAuthenticator and the authentication clients

• Question 5:

  Which two types of digital certificates can you create in Fortiauthenticator? (Choose two)

  A. Usercertificate
  B. Organization validation certificate
  C. Third-party root certificate
  D. Local service certificate
  A. Usercertificate
  D. Local service certificate

• Question 6:

  You want to monitor FortiAuthenticator system information and receive FortiAuthenticator traps through SNMP.

  Which two configurations must be performed after enabling SNMP access on the FortiAuthenticator interface? (Choose two)

  A. Enable logging services
  B. Set the tresholds to trigger SNMP traps
  C. Upload management information base (MIB) files to SNMP server
  D. Associate an ASN, 1 mapping rule to the receiving host
  B. Set the tresholds to trigger SNMP traps
  C. Upload management information base (MIB) files to SNMP server

• Question 7:

  Which interface services must be enabled for the SCEP client to connect to Authenticator?

  A. OCSP
  B. REST API
  C. SSH
  D. HTTP/HTTPS
  D. HTTP/HTTPS

• Question 8:

  Which two features of FortiAuthenticator are used for EAP deployment? (Choose two)

  A. Certificate authority
  B. LDAP server
  C. MAC authentication bypass
  D. RADIUS server
  A. Certificate authority
  D. RADIUS server

• Question 9:

  When you are setting up two FortiAuthenticator devices in active-passive HA, which HA role must you select on the masterFortiAuthenticator?

  A. Active-passive master
  B. Standalone master
  C. Cluster member
  D. Load balancing master
  C. Cluster member

• Question 10:

  You are the administrator of a large network that includes a large local user datadabase on the current Fortiauthenticatior. You want to import all the local users into a new Fortiauthenticator device.

  Which method should you use to migrate the local users?

  A. Import users using RADIUS accounting updates.
  B. Import the current directory structure.
  C. Import users fromRADUIS.
  D. Import users using a CSV file.
  D. Import users using a CSV file.