Fortinet NSE 6 NSE6_FAC-6.4 Exam Dumps Questions

dumps2023-06-26T09:51:39+08:00

NSE6_FAC-6.4 exam is a related test for Fortinet NSE 6 certification. Passing the Fortinet NSE6_FAC-6.4 exam is a required step for you to get certified. There are 30 multiple-choice questions in the real Fortinet NSE6_FAC-6.4 exam, and you have 60 minutes to answer all the questions. The available language is English. We have cracked the latest Fortinet NSE 6 NSE6_FAC-6.4 exam dumps questions, which are valuable in your preparation. Free Fortinet certification NSE6_FAC-6.4 exam dumps questions are below.

Page 1 of 2

1. Examine the screenshot shown in the exhibit.

Which two statements regarding the configuration are true? (Choose two.)

All guest accounts created using the account registration feature will be placed under the Guest_Portal_Users group

All accounts registered through the guest portal must be validated through email

Guest users must fill in all the fields on the registration form

Guest user account will expire after eight hours

2. An administrator is integrating FortiAuthenticator with an existing RADIUS server with the intent of eventually replacing the RADIUS server with FortiAuthenticator.

How can FortiAuthenticator help facilitate this process?

By configuring the RADIUS accounting proxy

By enabling automatic REST API calls from the RADIUS server

By enabling learning mode in the RADIUS server configuration

By importing the RADIUS user records

3. You are an administrator for a large enterprise and you want to delegate the creation and management of guest users to a group of sponsors.

How would you associate the guest accounts with individual sponsors?

As an administrator, you can assign guest groups to individual sponsors.

Guest accounts are associated with the sponsor that creates the guest account.

You can automatically add guest accounts to groups associated with specific sponsors.

Select the sponsor on the guest portal, during registration.

4. You are a Wi-Fi provider and host multiple domains.

How do you delegate user accounts, user groups and permissions per domain when they are authenticating on a single FortiAuthenticator device?

Create realms.

Create user groups

Create multiple directory trees on FortiAuthenticator

Automatically import hosts from each domain as they authenticate.

5. You have implemented two-factor authentication to enhance security to sensitive enterprise systems.

How could you bypass the need for two-factor authentication for users accessing form specific secured networks?

Create an admin realm in the authentication policy

Specify the appropriate RADIUS clients in the authentication policy

Enable Adaptive Authentication in the portal policy

Enable the Resolve user geolocation from their IP address option in the authentication policy.

6. Which network configuration is required when deploying FortiAuthenticator for portal services?

FortiAuthenticator must have the REST API access enable on port1

One of the DNS servers must be a FortiGuard DNS server

Fortigate must be setup as default gateway for FortiAuthenticator

Policies must have specific ports open between FortiAuthenticator and the authentication clients

7. You are a FortiAuthenticator administrator for a large organization. Users who are configured to use FortiToken 200 for two-factor authentication can no longer authenticate. You have verified that only the users with two-factor authentication are experiencing the issue.

What can cause this issue?

FortiToken 200 license has expired

One of the FortiAuthenticator devices in the active-active cluster has failed

Time drift between FortiAuthenticator and hardware tokens

FortiAuthenticator has lost contact with the FortiToken Cloud servers

8. Why would you configure an OCSP responder URL in an end-entity certificate?

To designate the SCEP server to use for CRL updates for that certificate

To identify the end point that a certificate has been assigned to

To designate a server for certificate status checking

To provide the CRL location for the certificate

9. An administrator wants to keep local CA cryptographic keys stored in a central location.

Which FortiAuthenticator feature would provide this functionality?

SCEP support

REST API

Network HSM

SFTP server

10. Which option correctly describes an SP-initiated SSO SAML packet flow for a host without a SAML assertion?

Service provider contacts idendity provider, idendity provider validates principal for service provider, service provider establishes communication with principal

Principal contacts idendity provider and is redirected to service provider, principal establishes connection with service provider, service provider validates authentication with identify provider

Principal contacts service provider, service provider redirects principal to idendity provider, after succesfull authentication identify provider redirects principal to service provider

Principal contacts idendity provider and authenticates, identity provider relays principal to service provider after valid authentication

Page 2 of 2

11. Which two types of digital certificates can you create in Fortiauthenticator? (Choose two)

User certificate

Organization validation certificate

Third-party root certificate

Local service certificate

12. Which EAP method is known as the outer authentication method?

PEAP

EAP-GTC

EAP-TLS

MSCHAPV2

13. You want to monitor FortiAuthenticator system information and receive FortiAuthenticator traps through SNMP.

Which two configurations must be performed after enabling SNMP access on the FortiAuthenticator interface? (Choose two)

Enable logging services

Set the tresholds to trigger SNMP traps

Upload management information base (MIB) files to SNMP server

Associate an ASN, 1 mapping rule to the receiving host

14. Which two features of FortiAuthenticator are used for EAP deployment? (Choose two)

Certificate authority

LDAP server

MAC authentication bypass

RADIUS server

15. How can a SAML metada file be used?

To defined a list of trusted user names

To import the required IDP configuration

To correlate the IDP address to its hostname

To resolve the IDP realm for authentication

Fortinet NSE 6 NSE6_FAC-6.4 Exam Dumps Questions

Fortinet NSE 6 NSE6_FAC-6.4 Exam Dumps Questions

Share this post

Leave a Reply Cancel reply

Related Posts