Fortinet NSE6_FAC-6.1 Online Practice Questions and Exam Preparation

Fortinet NSE6_FAC-6.1 Online Questions & Answers

• Question 21:

  You are a Wi-Fi provider and host multiple domains. How do you delegate user accounts, user groups and permissions per domain when theyare authenticating on a single FortiAuthenticator device?

  A. Automatically import hosts from each domain as they authenticate
  B. Create multiple directory trees on FortiAuthenticator
  C. Create realms
  D. Create user groups
  C. Create realms

• Question 22:

  Which two statements about the EAP-TTLS authentication method are true? (Choose two)

  A. Uses mutualauthentication
  B. Uses digital certificates only on the server side
  C. Requires an EAP server certificate
  D. Support a port access control (wired) solution only
  B. Uses digital certificates only on the server side
  C. Requires an EAP server certificate

• Question 23:

  You are a FortiAuthenticator administrator for a large organization. Users who are configured to use FortiToken 200 for two-factor authentication can no longer authenticate. You have verified that only the users with two-factor authentication are experiencing the issue.

  What can couse this issue?

  A. On of the FortiAuthenticator devices in the active-active cluster has failed
  B. FortiAuthenticator has lose contact with the FortiToken Cloud servers
  C. FortiToken 200 licence has expired
  D. Time drift between FortiAuthenticator and hardware tokens
  D. Time drift between FortiAuthenticator and hardware tokens

• Question 24:

  What are three key features of FortiAuthenticator? (Choose three)

  A. Identity management device
  B. Log server
  C. Certificate authority
  D. Portal services
  E. RSSO Server
  A. Identity management device
  C. Certificate authority
  D. Portal services

• Question 25:

  What happens when a certificate is revoked? (Choose two)

  A. Revoked certificates cannot be reinstated for any reason
  B. All certificates signed by a revoked CA certificate are automatically revoked
  C. Revoked certificates are automatically added to the CRL
  D. External CAs will priodically query Fortiauthenticator and automatically download revoked certificates
  C. Revoked certificates are automatically added to the CRL
  D. External CAs will priodically query Fortiauthenticator and automatically download revoked certificates

• Question 26:

  Which method is the most secure way of delivering FortiToken data once the token has been seeded?

  A. Online activation of the tokens through the FortiGuard network
  B. Shipment of the seed files on a CD using a tamper-evident envelope
  C. Using the in-house token provisioning tool
  D. Automatic token generation using FortiAuthenticator
  B. Shipment of the seed files on a CD using a tamper-evident envelope

• Question 27:

  Which of the following is an QATH-based standart to generate event-based, one-time password tokens?

  A. OLTP
  B. SOTP
  C. HOTP
  D. TOTP
  C. HOTP

• Question 28:

  Which two statement about the RADIUS service on FortiAuthenticator are true? (Choose two)

  A. Two-factor authentication cannot be enforced when using RADIUS authentication
  B. RADIUS users can migrated to LDAP users
  C. Only local users can be authenticated through RADIUS
  D. FortiAuthenticator answers only to RADIUS client that are registered with FortiAuthenticator
  B. RADIUS users can migrated to LDAP users
  D. FortiAuthenticator answers only to RADIUS client that are registered with FortiAuthenticator

• Question 29:

  Which two capabilities does FortiAuthenticator offer when acting as a self-signed or local CA? (Choose two)

  A. Validating other CA CRLs using OSCP
  B. Importing other CA certificates and CRLs
  C. Merging local and remote CRLs using SCEP
  D. Creating, signing, and revoking of X.509 certificates
  B. Importing other CA certificates and CRLs
  D. Creating, signing, and revoking of X.509 certificates

• Question 30:

  Which EAP method is known as the outer authentication method?

  A. PEAP
  B. EAP-GTC
  C. EAP-TLS
  D. MSCHAPV2
  A. PEAP