PDF Download Free of NSE6_FAC-6.4 Valid Practice Test Questions [Q14-Q35]

QUESTION 14
A system administrator wants to integrate FortiAuthenticator with an existing identity management system with the goal of authenticating and deauthenticating users into FSSO.
What feature does FortiAuthenticator offer for this type of integration?

QUESTION 15
Which network configuration is required when deploying FortiAuthenticator for portal services?

QUESTION 16
You are the administrator of a global enterprise with three FortiAuthenticator devices. You would like to deploy them to provide active-passive HA at headquarters, with geographically distributed load balancing.
What would the role settings be?

QUESTION 17
What are three key features of FortiAuthenticator? (Choose three)

QUESTION 18
What happens when a certificate is revoked? (Choose two)

QUESTION 19
Which two statement about the RADIUS service on FortiAuthenticator are true? (Choose two)

QUESTION 20
Which FSSO discovery method transparently detects logged off users without having to rely on external features such as WMI polling?

QUESTION 21
Which two protocols are the default management access protocols for administrative access for FortiAuthenticator? (Choose two)

QUESTION 22
You are the administrator of a large network that includes a large local user datadabase on the current Fortiauthenticatior. You want to import all the local users into a new Fortiauthenticator device.
Which method should you use to migrate the local users?

QUESTION 23
At a minimum, which two configurations are required to enable guest portal services on FortiAuthenticator? (Choose two)

QUESTION 24
You have implemented two-factor authentication to enhance security to sensitive enterprise systems.
How could you bypass the need for two-factor authentication for users accessing form specific secured networks?

QUESTION 25
At a minimum, which two configurations are required to enable guest portal services on FortiAuthenticator? (Choose two)

QUESTION 26
Which method is the most secure way of delivering FortiToken data once the token has been seeded?

QUESTION 27
Which interface services must be enabled for the SCEP client to connect to Authenticator?

QUESTION 28
Why would you configure an OCSP responder URL in an end-entity certificate?

QUESTION 29
Which two features of FortiAuthenticator are used for EAP deployment? (Choose two)

QUESTION 30
You are a FortiAuthenticator administrator for a large organization. Users who are configured to use FortiToken 200 for two-factor authentication can no longer authenticate. You have verified that only the users with two-factor authentication are experiencing the issue.
What can cause this issue?

QUESTION 31
Which two statements about the EAP-TTLS authentication method are true? (Choose two)

QUESTION 32
A digital certificate, also known as an X.509 certificate, contains which two pieces of information? (Choose two.)