Free Preparation Discussions
MENU
Fortinet NSE6_FAC-6.4 Exam
- Topic 1: Understand and configure administrative accounts and roles/ Configure tokens and two-factor authentication
- Topic 2: Use local authentication events for Fortinet Single Sign-On (FSSO)/ Implement RADIUS profiles and realms for RADIUS authentication
- Topic 3: Implement SAML roles on FortiAuthenticator for the SAML SSO service/ Configure FortiAuthenticator for deployment
- Topic 4: Use FortiAuthenticator portal services to authenticate local and remote users/ Configure and manage supported remote authentication services
- Topic 5: Use the FortiAuthenticator certificate management service to generate local certificates/ Configure and manage user accounts
- Topic 6: Integrate FortiAuthenticator with Active Directory (AD) to detect logon events/ Describe key concepts of PKI and digital certificates
- Topic 7: Use third-party logon events via RADIUS single sign-on (RSSO), tags, and logs to generate FSSO events/ Configure advanced system settings
Free Fortinet NSE6_FAC-6.4 Exam Actual Questions
The questions for NSE6_FAC-6.4 were last updated On Sep. 11, 2023
Which EAP method is known as the outer authentication method?
PEAP is known as the outer authentication method because it establishes a secure tunnel between the client and the server using TLS. The inner authentication method, such as EAP-GTC, EAP-TLS, or MSCHAPV2, is then used to authenticate the client within the tunnel.
At a minimum, which two configurations are required to enable guest portal services on FortiAuthenticator? (Choose two)
enable guest portal services on FortiAuthenticator, you need to configure a portal policy that defines the conditions for presenting the guest portal to users and the authentication methods to use. You also need to configure at least one post-login service that defines what actions to take after a user logs in successfully, such as sending an email confirmation, assigning a VLAN, or creating a user account. Configuring a RADIUS client or an external authentication portal are optional steps that depend on your network setup and requirements. Reference: https://docs.fortinet.com/document/fortiauthenticator/6.4/administration-guide/372404/guest-management
Which method is the most secure way of delivering FortiToken data once the token has been seeded?
Online activation of the tokens through the FortiGuard network is the most secure way of delivering FortiToken data once the token has been seeded because it eliminates the risk of seed files being compromised during transit or storage. The other methods involve physical or manual delivery of seed files which can be intercepted, lost, or stolen. Reference: https://docs.fortinet.com/document/fortiauthenticator/6.4/administration-guide/372403/fortitoken
At a minimum, which two configurations are required to enable guest portal services on FortiAuthenticator? (Choose two)
enable guest portal services on FortiAuthenticator, you need to configure a portal policy that defines the conditions for presenting the guest portal to users and the authentication methods to use. You also need to configure at least one post-login service that defines what actions to take after a user logs in successfully, such as sending an email confirmation, assigning a VLAN, or creating a user account. Configuring a RADIUS client or an external authentication portal are optional steps that depend on your network setup and requirements. Reference: https://docs.fortinet.com/document/fortiauthenticator/6.4/administration-guide/372404/guest-management
Which two statements about the EAP-TTLS authentication method are true? (Choose two)
EAP-TTLS is an authentication method that uses digital certificates only on the server side to establish a secure tunnel between the server and the client. The client does not need a certificate but can use any inner authentication method supported by the server, such as PAP, CHAP, MS-CHAP, or EAP-MD5. EAP-TTLS requires an EAP server certificate that is issued by a trusted CA and installed on the FortiAuthenticator device acting as the EAP server. EAP-TTLS supports both wireless and wired solutions for port access control. Reference: https://docs.fortinet.com/document/fortiauthenticator/6.4/administration-guide/372412/eap-ttls
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Submit Cancel