MENU
Refer to the exhibit.
The exhibit shows the topology a customer wants to implement using a flexible authentication scheme. Users connecting from trusted remote locations are authenticated using only their username/password when connecting to the SSLVPN FortiGate in the data center.
When connecting from the Untrusted Clients, users must authenticate using 2-factor authentication.
In this scenario, which RADIUS attribute can be used as a RADIUS policy selector on the FortiAuthenticator to accomplish this goal?
Suggested Answer: C
Get Premium NSE8_812 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
29 comments · newest first
RE
Reiko
6 months ago
Exactly! It fits the trusted vs untrusted scenario well.
TR
Tresa
6 months ago
A is for location-based policies, right?
CO
Cora
6 months ago
Why A? I thought C) Tunnel-Client-Auth-Id makes more sense.
JO
Johna
6 months ago
I'm leaning towards A) Calling-Station-Id.
AS
Ashanti
6 months ago
I think it's about identifying the right attribute.
JO
Joseph
7 months ago
This question is tricky.
AD
Adell
7 months ago
Definitely 2-factor for untrusted clients, no doubt about it!
SH
Sharita
7 months ago
Framed-IP-Address could also work, but not my first pick.
TO
Tomas
8 months ago
Wait, are we sure about that? Seems too simple.
LE
Lenna
8 months ago
Totally agree, it helps identify the connection type!
LA
Lavonna
8 months ago
I think Calling-Station-Id is the right choice here.
NA
Nathan
8 months ago
Haha, I bet the exam writers are trying to trick us with these options!
RU
Rupert
8 months ago
Hmm, this is a tricky one. I'll have to think about it some more.
LE
Leslee
8 months ago
I'm not sure, but I think B might be the correct answer.
JA
Jacqueline
9 months ago
I vaguely recall that Framed-IP-Address is used for something else, but I can't remember the specifics. I hope I can narrow it down to one of the other options during the exam.
HE
Herminia
9 months ago
I’m a bit confused about the options. I thought Login-IP-Host was more about the IP address of the client rather than the authentication method.
EM
Emogene
9 months ago
I practiced a similar question where we had to choose RADIUS attributes based on client types. I feel like Tunnel-Client-Auth-Id could be the right choice for differentiating between trusted and untrusted clients.
JE
Jessenia
9 months ago
I feel pretty confident about this one. The key is identifying the RADIUS attribute that can distinguish between the trusted and untrusted clients.
RO
Roslyn
9 months ago
I'm a bit confused by the 2-factor authentication requirement. I'll need to make sure I understand how that fits into the overall authentication scheme.
SH
Sherell
9 months ago
Okay, I've got a strategy. I'll consider each answer option and think about how the RADIUS attribute could be used to differentiate between the trusted and untrusted clients.
AL
Alayna
10 months ago
Option C looks good to me.
VI
Vincenza
10 months ago
I remember studying RADIUS attributes, but I'm not entirely sure which one applies here. I think Calling-Station-Id might be relevant for identifying the client location.
CA
Catalina
11 months ago
Hmm, this seems like a tricky one. I'll need to think through the different RADIUS attributes and how they might be used in this scenario.
DE
Della
11 months ago
I think I'll start by carefully reviewing the topology diagram and the question details. That should give me a good understanding of the requirements.
WI
Wilda
5 months ago
But what about Tunnel-Client-Auth-Id? It could work too.
IS
Isreal
6 months ago
Definitely! The authentication methods are crucial here.
VE
Verlene
10 months ago
I agree, the topology is key to understanding the setup.
JO
Jolanda
10 months ago
I’m leaning towards Login-IP-Host for untrusted clients.
BR
Brianne
10 months ago
I think Calling-Station-Id makes sense for the policy selector.