Fortinet Exam NSE6_FAC-6.4 Topic 6 Question 25 Discussion

Actual exam question for Fortinet's NSE6_FAC-6.4 exam

Question #: 25
Topic #: 6

[All NSE6_FAC-6.4 Questions]

Which interface services must be enabled for the SCEP client to connect to Authenticator?

AOCSP

BREST API

CSSH

DHTTP/HTTPS

Show Suggested Answer

Suggested Answer: A, D

FortiAuthenticator can be configured as a SAML identity provider (IdP) or a SAML service provider (SP). As an IdP, FortiAuthenticator authenticates users and issues SAML assertions to SPs. As an SP, FortiAuthenticator receives SAML assertions from IdPs and grants access to users based on the attributes in the assertions. Principal and assertion server are not valid SAML roles. Reference: https://docs.fortinet.com/document/fortiauthenticator/6.4/administration-guide/372407/saml

by Dwight at Jun 18, 2024, 05:30 AM

Limited Time Offer

25%

Off

Get Premium NSE6_FAC-6.4 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Gussie

17 days ago

I'm going with D) HTTP/HTTPS. It's the most common and logical choice for secure communication between the SCEP client and Authenticator. Anything else would just be overkill or irrelevant.

upvoted 0 times

Mammie

1 days ago

I think REST API could also work, but HTTP/HTTPS is definitely the safer choice.

upvoted 0 times

...

Domonique

2 days ago

I agree, HTTP/HTTPS is the way to go for secure communication.

upvoted 0 times

...

Asha

1 months ago

Hey, what about OCSP? That's for checking the status of digital certificates, so it could be related to the SCEP client authentication process. Gotta love those cryptography-related acronyms!

upvoted 0 times

Rima

15 days ago

I think you're right, OCSP is used for checking the status of digital certificates. It could definitely be related to the SCEP client authentication process.

upvoted 0 times

...

Malcolm

17 days ago

D) HTTP/HTTPS

upvoted 0 times

...

Delfina

22 days ago

A) OCSP

upvoted 0 times

...

Chau

1 months ago

Haha, I'm sure SSH is not the answer. That's for secure shell access, not SCEP connections. Unless the Authenticator is secretly a supercomputer in disguise!

upvoted 0 times

...

Vicki

1 months ago

Well, the question specifically says 'interface services', so I'm guessing it's not just the protocol, but some specific service. Hmm, let me think about this...

upvoted 0 times

Lonny

3 days ago

I think it's A) OCSP because it's a service that can be used for certificate validation.

upvoted 0 times

...

Charlene

17 days ago

D) HTTP/HTTPS

upvoted 0 times

...

Ernestine

28 days ago

A) OCSP

upvoted 0 times

...

Lavera

2 months ago

I'm not sure, but I think REST API could also be a possible option for connecting to Authenticator.

upvoted 0 times

...

Melita

2 months ago

I agree with Chaya, HTTP/HTTPS makes sense for connecting to Authenticator.

upvoted 0 times

...

Valentine

2 months ago

The SCEP client needs to connect to the Authenticator, so I think the answer is D) HTTP/HTTPS. That's the standard protocol for secure communication, right?

upvoted 0 times

Dorsey

22 days ago

SSH is more for secure remote access, so I don't think that's necessary for the SCEP client to connect to Authenticator.

upvoted 0 times

...

Rory

23 days ago

I'm not sure about OCSP, but I know REST API is commonly used for communication between systems.

upvoted 0 times

...

Alba

23 days ago

Yes, HTTP/HTTPS is the standard protocol for secure communication, so that would be the right choice.

upvoted 0 times

...

Cruz

29 days ago

But what about OCSP? Isn't that also needed for the SCEP client to connect to Authenticator?

upvoted 0 times

...

Krissy

1 months ago

I agree, HTTP/HTTPS is the correct answer for connecting the SCEP client to the Authenticator.

upvoted 0 times

...

Vi

1 months ago

I think you're right, HTTP/HTTPS is the standard protocol for secure communication.

upvoted 0 times

...

Chaya

2 months ago

I think the answer is D) HTTP/HTTPS.

upvoted 0 times

...