Fortinet NSE6_FAC-6.1 Online Practice Questions and Exam Preparation

Fortinet NSE6_FAC-6.1 Online Questions & Answers

• Question 11:

  At a minimum, which two configurations are required to enable guest portal services on FortiAuthenticator? (Choose two)

  A. Configuring a portal policy
  B. Configuring at least on post-login service
  C. Configuring a RADIUS client
  D. Configuring an external authentication portal
  A. Configuring a portal policy
  B. Configuring at least on post-login service

• Question 12:

  Which behaviors exist for certificate revocation lists (CRLs) on FortiAuthenticator? (Choose two)

  A. CRLs contain the serial number of the certificate that has been revoked
  B. Revoked certificates are automaticlly placed on the CRL
  C. CRLs can beexported only through the SCEP server
  D. All local CAs share the same CRLs
  A. CRLs contain the serial number of the certificate that has been revoked
  B. Revoked certificates are automaticlly placed on the CRL

• Question 13:

  Which two SAML roles can Fortiauthenticator be configured as? (Choose two)

  A. Idendity provider
  B. Principal
  C. Assertion server
  D. Service provider
  A. Idendity provider
  D. Service provider

• Question 14:

  Which statement about the guest portal policies is true?

  A. Guest portal policies apply only to authentication requests coming from unknown RADIUS clients
  B. Guest portal policies can be used only for BYODs
  C. Conditions in the policy apply only to guest wireless users
  D. All conditions in the policy must match before a user is presented with the guest portal
  D. All conditions in the policy must match before a user is presented with the guest portal

• Question 15:

  Which two protocols are the default management access protocols for administrative access for FortiAuthenticator? (Choose two)

  A. Telnet
  B. HTTPS
  C. SSH
  D. SNMP
  B. HTTPS
  C. SSH

• Question 16:

  Which FSSO discovery method transparently detects logged off users without having to rely on external features such as WMI polling?

  A. Windows AD polling
  B. FortiClient SSO Mobility Agent
  C. Radius Accounting
  D. DC Polling
  B. FortiClient SSO Mobility Agent

• Question 17:

  Refer to the exhibit.

  Examine the screenshot shown in the exhibit.

  

  Which two statements regarding the configuration are true? (Choose two)

  A. All guest accounts created using the account registration feature will be placed under the Guest_Portal_Users group
  B. All accounts registered through the guest portal must be validated through email
  C. Guest users must fill in all the fields on the registration form
  D. Guest user account will expire after eight hours
  A. All guest accounts created using the account registration feature will be placed under the Guest_Portal_Users group
  B. All accounts registered through the guest portal must be validated through email

• Question 18:

  How can a SAML metada file be used?

  A. To defined a list of trusted user names
  B. To import the required IDP configuration
  C. To correlate the IDP address to its hostname
  D. To resolve the IDP realm for authentication
  B. To import the required IDP configuration

• Question 19:

  Which two are supported captive or guest portal authentication methods? (Choose two)

  A. Linkedln
  B. Apple ID
  C. Instagram
  D. Email
  A. Linkedln
  D. Email

• Question 20:

  Which three of the following can be used as SSO sources? (Choose three)

  A. FortiClient SSO Mobility Agent
  B. SSH Sessions
  C. FortiAuthenticator in SAML SP role
  D. Fortigate
  E. RADIUS accounting
  A. FortiClient SSO Mobility Agent
  C. FortiAuthenticator in SAML SP role
  E. RADIUS accounting