Fortinet Fortinet Certifications NSE6_FAC-6.1 Questions & Answers

• Question 11:

  Which two capabilities does FortiAuthenticator offer when acting as a self-signed or local CA? (Choose two)

  A. Validating other CA CRLs using OSCP

  B. Importing other CA certificates and CRLs

  C. Merging local and remote CRLs using SCEP

  D. Creating, signing, and revoking of X.509 certificates

  Correct Answer: BD

• Question 12:

  Which interface services must be enabled for the SCEP client to connect to Authenticator?

  A. OCSP

  B. REST API

  C. SSH

  D. HTTP/HTTPS

  Correct Answer: D

• Question 13:

  A device or useridentity cannot be established transparently, such as with non-domain BYOD devices, and allow users to create their own credentialis.

  In this case, which user idendity discovery method can Fortiauthenticator use?

  A. Syslog messaging or SAML IDP

  B. Kerberos-base authentication

  C. Radius accounting

  D. Portal authentication

  Correct Answer: D

• Question 14:

  Which two SAML roles can Fortiauthenticator be configured as? (Choose two)

  A. Idendity provider

  B. Principal

  C. Assertion server

  D. Service provider

  Correct Answer: AD

• Question 15:

  Which three of the following can be used as SSO sources? (Choose three)

  A. FortiClient SSO Mobility Agent

  B. SSH Sessions

  C. FortiAuthenticator in SAML SP role

  D. Fortigate

  E. RADIUS accounting

  Correct Answer: ACE

• Question 16:

  How can a SAML metada file be used?

  A. To defined a list of trusted user names

  B. To import the required IDP configuration

  C. To correlate the IDP address to its hostname

  D. To resolve the IDP realm for authentication

  Correct Answer: B

• Question 17:

  Which two statements about the self-service portal are true? (Choose two)

  A. Self-registration information can be sent to the user through email or SMS

  B. Realms can be used to configure which seld-registeredusers or groups can authenticate on the network

  C. Administrator approval is required for all self-registration

  D. Authenticating users must specify domain name along with username

  Correct Answer: AB

• Question 18:

  You want to monitor FortiAuthenticator system information and receive FortiAuthenticator traps through SNMP.

  Which two configurations must be performed after enabling SNMP access on the FortiAuthenticator interface? (Choose two)

  A. Enable logging services

  B. Set the tresholds to trigger SNMP traps

  C. Upload management information base (MIB) files to SNMP server

  D. Associate an ASN, 1 mapping rule to the receiving host

  Correct Answer: BC

• Question 19:

  Which behaviors exist for certificate revocation lists (CRLs) on FortiAuthenticator? (Choose two)

  A. CRLs contain the serial number of the certificate that has been revoked

  B. Revoked certificates are automaticlly placed on the CRL

  C. CRLs can beexported only through the SCEP server

  D. All local CAs share the same CRLs

  Correct Answer: AB

• Question 20:

  Which of the following is an QATH-based standart to generate event-based, one-time password tokens?

  A. OLTP

  B. SOTP

  C. HOTP

  D. TOTP

  Correct Answer: C