Fortinet NSE 6 - FortiAuthenticator 6.4 (NSE6_FAC-6.4) Free Practice Test

Question 1

When generating a TOTP for two-factor authentication, what two pieces of information are used by the algorithm to generate the TOTP?

A. Time and mobile location

B. UUID and time

C. Time and FortiAuthenticator serial number

D. Time and seed

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Which option correctly describes an SP-initiated SSO SAML packet flow for a host without a SAML assertion?

A. Principal contacts idendity provider and authenticates, identity provider relays principal to service provider after valid authentication

B. Principal contacts service provider, service provider redirects principal to idendity provider, after succesfull authentication identify provider redirects principal to service provider

C. Principal contacts idendity provider and is redirected to service provider, principal establishes connection with service provider, service provider validates authentication with identify provider

D. Service provider contacts idendity provider, idendity provider validates principal for service provider, service provider establishes communication with principal

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Which network configuration is required when deploying FortiAuthenticator for portal services?

A. Fortigate must be setup as default gateway for FortiAuthenticator

B. One of the DNS servers must be a FortiGuard DNS server

C. FortiAuthenticator must have the REST API access enable on port1

D. Policies must have specific ports open between FortiAuthenticator and the authentication clients

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

What capability does the inbound proxy setting provide?

A. It allows FortiAuthenticator system access to authenticating users, based on a geo IP address designation.

B. It allows FortiAuthenticator the ability to round robin load balance remote authentication servers.

C. It allows FortiAuthenticator to act as a proxy for remote authentication servers.

D. It allows FortiAuthenticator to determine the origin source IP address after traffic passes through a proxy for system access,

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

You are the administrator of a large network that includes a large local user datadabase on the current Fortiauthenticatior. You want to import all the local users into a new Fortiauthenticator device.
Which method should you use to migrate the local users?

A. Import users from RADUIS.

B. Import users using RADIUS accounting updates.

C. Import users using a CSV file.

D. Import the current directory structure.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Fortinet NSE 6 - FortiAuthenticator 6.4 (NSE6_FAC-6.4) Free Practice Test