Fortinet Fortinet Certifications NSE6_FAC-6.1 Questions & Answers

• Question 21:

  Which two types of digital certificates can you create in Fortiauthenticator? (Choose two)

  A. Usercertificate

  B. Organization validation certificate

  C. Third-party root certificate

  D. Local service certificate

  Correct Answer: AD

• Question 22:

  Which network configuration is required when deploying FortiAuthenticator for portal services?

  A. FortiAuthenticator must have the REST API access enable on port1

  B. One of the DNS servers must be a FortiGuard DNS server

  C. Fortigate must be setup as default gateway for FortiAuthenticator

  D. Policies must have specific ports open between FortiAuthenticator and the authentication clients

  Correct Answer: D

• Question 23:

  Which EAP method is known as the outer authentication method?

  A. PEAP

  B. EAP-GTC

  C. EAP-TLS

  D. MSCHAPV2

  Correct Answer: A

• Question 24:

  Which FSSO discovery method transparently detects logged off users without having to rely on external features such as WMI polling?

  A. Windows AD polling

  B. FortiClient SSO Mobility Agent

  C. Radius Accounting

  D. DC Polling

  Correct Answer: B

• Question 25:

  You are a FortiAuthenticator administrator for a large organization. Users who are configured to use FortiToken 200 for two-factor authentication can no longer authenticate. You have verified that only the users with two-factor authentication are experiencing the issue.

  What can couse this issue?

  A. On of the FortiAuthenticator devices in the active-active cluster has failed

  B. FortiAuthenticator has lose contact with the FortiToken Cloud servers

  C. FortiToken 200 licence has expired

  D. Time drift between FortiAuthenticator and hardware tokens

  Correct Answer: D

• Question 26:

  You are the administrator of a large network that includes a large local user datadabase on the current Fortiauthenticatior. You want to import all the local users into a new Fortiauthenticator device.

  Which method should you use to migrate the local users?

  A. Import users using RADIUS accounting updates.

  B. Import the current directory structure.

  C. Import users fromRADUIS.

  D. Import users using a CSV file.

  Correct Answer: D

• Question 27:

  What happens when a certificate is revoked? (Choose two)

  A. Revoked certificates cannot be reinstated for any reason

  B. All certificates signed by a revoked CA certificate are automatically revoked

  C. Revoked certificates are automatically added to the CRL

  D. External CAs will priodically query Fortiauthenticator and automatically download revoked certificates

  Correct Answer: CD

• Question 28:

  What are three key features of FortiAuthenticator? (Choose three)

  A. Identity management device

  B. Log server

  C. Certificate authority

  D. Portal services

  E. RSSO Server

  Correct Answer: ACD

• Question 29:

  Which two statements about the EAP-TTLS authentication method are true? (Choose two)

  A. Uses mutualauthentication

  B. Uses digital certificates only on the server side

  C. Requires an EAP server certificate

  D. Support a port access control (wired) solution only

  Correct Answer: BC

• Question 30:

  At a minimum, which two configurations are required to enable guest portal services on FortiAuthenticator? (Choose two)

  A. Configuring a portal policy

  B. Configuring at least on post-login service

  C. Configuring a RADIUS client

  D. Configuring an external authentication portal

  Correct Answer: AB