Practice NSE6_FAC-6.4 Exam Online

Question 1

Which interface service must be enabled for the SCEP client to connect to FortiAuthenticator?

A : REST API

B : SSH

C : HTTP/HTTPS

D : OCSP

Answer: C

Question 2

An administrator is integrating FortiAuthenticator with an existing RADIUS server with the intent of eventually replacing the RADIUS server with FortiAuthenticator. How can FortiAuthenticator help facilitate this process?

A : By configuring the RADIUS accounting proxy

B : By enabling automatic REST API calls from the RADIUS server

C : By enabling learning mode in the RADIUS server configuration

D : By importing the RADIUS user records

Answer: A

Question 3

You are a FortiAuthenticator administrator for a large organization. Users who are configured to use FortiToken 200 for two-factor authentication can no longer authenticate. You have verified that only the users with twofactor authentication are experiencing the issue. What can cause this issue?

A : FortiToken 200 license has expired

B : One of the FortiAuthenticator devices in the active-active cluster has failed.

C : Time drift between FortiAuthenticator and hardware tokens.

D : FortiAuthenticator has lost contact with the FortiToken Cloud servers.

Answer: C

Question 4

Which three of the following can be used as SSO sources? (Choose three)

A : FortiClient SSO Mobility Agent

B : SSH Sessions

C : FortiAuthenticator in SAML SP role

D : Fortigate

E : RADIUS accounting

Answer: A,D

Question 5

Which two statements about the EAP-TTLS authentication method are true? (Choose two)

A : Uses mutual authentication

B : Uses digital certificates only on the server side

C : Requires an EAP server certificate

D : Support a port access control (wired) solution only

Answer: B,C

Name:	Fortinet NSE 6 - FortiAuthenticator 6.4
Exam Code:	NSE6_FAC-6.4
Certification:	NSE 6 Network Security Specialist
Vendor:	Fortinet
Total Questions:	51
Last Updated:	Apr 25, 2024

Fortinet NSE6_FAC-6.4