Free NSE6_FAC-6.1 Exam Study Guide for the NEW [Feb-2023] Dumps Test Engine [Q16-Q39]

QUESTION 16
Which two features of FortiAuthenticator are used for EAP deployment? (Choose two)

Certificate authority

LDAP server

MAC authentication bypass

RADIUS server

QUESTION 17
What are three key features of FortiAuthenticator? (Choose three)

Identity management device

Log server

Certificate authority

Portal services

RSSO Server

QUESTION 18
Which EAP method is known as the outer authentication method?

PEAP

EAP-GTC

EAP-TLS

MSCHAPV2

QUESTION 19
Refer to the exhibit.
Examine the screenshot shown in the exhibit.

Which two statements regarding the configuration are true? (Choose two)

All guest accounts created using the account registration feature will be placed under the Guest_Portal_Users group

All accounts registered through the guest portal must be validated through email

Guest users must fill in all the fields on the registration form

Guest user account will expire after eight hours

QUESTION 20
Which three of the following can be used as SSO sources? (Choose three)

FortiClient SSO Mobility Agent

SSH Sessions

FortiAuthenticator in SAML SP role

Fortigate

RADIUS accounting

QUESTION 21
You want to monitor FortiAuthenticator system information and receive FortiAuthenticator traps through SNMP.
Which two configurations must be performed after enabling SNMP access on the FortiAuthenticator interface?
(Choose two)

Enable logging services

Set the tresholds to trigger SNMP traps

Upload management information base (MIB) files to SNMP server

Associate an ASN, 1 mapping rule to the receiving host

QUESTION 22
Which two statement about the RADIUS service on FortiAuthenticator are true? (Choose two)

Two-factor authentication cannot be enforced when using RADIUS authentication

RADIUS users can migrated to LDAP users

Only local users can be authenticated through RADIUS

FortiAuthenticator answers only to RADIUS client that are registered with FortiAuthenticator

QUESTION 23
Which two SAML roles can Fortiauthenticator be configured as? (Choose two)

Idendity provider

Principal

Assertion server

Service provider

QUESTION 24
Which FSSO discovery method transparently detects logged off users without having to rely on external features such as WMI polling?

Windows AD polling

FortiClient SSO Mobility Agent

Radius Accounting

DC Polling

QUESTION 25
How can a SAML metada file be used?

To defined a list of trusted user names

To import the required IDP configuration

To correlate the IDP address to its hostname

To resolve the IDP realm for authentication

QUESTION 26
Which statement about the guest portal policies is true?

Guest portal policies apply only to authentication requests coming from unknown RADIUS clients

Guest portal policies can be used only for BYODs

Conditions in the policy apply only to guest wireless users

All conditions in the policy must match before a user is presented with the guest portal

QUESTION 27
You are the administrator of a large network that includes a large local user datadabase on the current Fortiauthenticatior. You want to import all the local users into a new Fortiauthenticator device.
Which method should you use to migrate the local users?

Import users using RADIUS accounting updates.

Import the current directory structure.

Import users fromRADUIS.

Import users using a CSV file.