Real NSE6_FAC-6.1 are Uploaded by ExamDumpsVCE provide 2023 Latest NSE6_FAC-6.1 Practice Tests Dumps.
All NSE6_FAC-6.1 Dumps and Fortinet NSE 6 - FortiAuthenticator 6.1 Training Courses Help candidates to study and pass the Fortinet NSE 6 - FortiAuthenticator 6.1 Exams hassle-free!
NEW QUESTION 14
Which option correctly describes an SP-initiated SSO SAML packet flow for a host without a SAML assertion?
- A. Principal contacts service provider, service provider redirects principal to idendity provider, after succesfull authentication identify provider redirects principal to service provider
- B. Service provider contacts idendity provider, idendity provider validates principal for service provider, service provider establishes communication with principal
- C. Principal contacts idendity provider and is redirected to serviceprovider, principal establishes connection with service provider, service provider validates authentication with identify provider
- D. Principal contacts idendity provider and authenticates, identity provider relays principal to service provider after valid authentication
Answer: A
NEW QUESTION 15
Which behaviors exist for certificate revocation lists (CRLs) on FortiAuthenticator? (Choose two)
- A. All local CAs share the same CRLs
- B. Revoked certificates are automaticlly placed on the CRL
- C. CRLs contain the serial number of the certificate that has been revoked
- D. CRLs can beexported only through the SCEP server
Answer: B,C
NEW QUESTION 16
Which interface services must be enabled for the SCEP client to connect to Authenticator?
- A. SSH
- B. HTTP/HTTPS
- C. OCSP
- D. REST API
Answer: B
NEW QUESTION 17
Which two statement about the RADIUS service on FortiAuthenticator are true? (Choose two)
- A. Only local users can be authenticated through RADIUS
- B. Two-factor authentication cannot be enforced when using RADIUS authentication
- C. FortiAuthenticator answers only to RADIUS client that are registered with FortiAuthenticator
- D. RADIUS users can migrated to LDAP users
Answer: C,D
NEW QUESTION 18
You are a Wi-Fi provider and host multiple domains. How do you delegate user accounts, user groups and permissions per domain when theyare authenticating on a single FortiAuthenticator device?
- A. Create user groups
- B. Create multiple directory trees on FortiAuthenticator
- C. Create realms
- D. Automatically import hosts from each domain as they authenticate
Answer: C
NEW QUESTION 19
Which two capabilities does FortiAuthenticator offer when acting as a self-signed or local CA? (Choose two)
- A. Importing other CA certificates and CRLs
- B. Creating, signing, and revoking of X.509 certificates
- C. Validating other CA CRLs using OSCP
- D. Merging local and remote CRLs using SCEP
Answer: A,B
NEW QUESTION 20
Which network configuration is required when deploying FortiAuthenticator for portal services?
- A. Policies must have specific ports open between FortiAuthenticator and the authentication clients
- B. Fortigate must be setup as default gateway for FortiAuthenticator
- C. One of the DNS servers must be a FortiGuard DNS server
- D. FortiAuthenticator must have the REST API access enable on port1
Answer: A
NEW QUESTION 21
Which two protocols are the default management access protocols for administrative access for FortiAuthenticator? (Choose two)
- A. HTTPS
- B. Telnet
- C. SSH
- D. SNMP
Answer: A,C
NEW QUESTION 22
When you are setting up two FortiAuthenticator devices in active-passive HA, which HA role must you select on the masterFortiAuthenticator?
- A. Load balancing master
- B. Active-passive master
- C. Cluster member
- D. Standalone master
Answer: C
NEW QUESTION 23
You want to monitor FortiAuthenticator system information and receive FortiAuthenticator traps through SNMP.
Which two configurations must be performed after enabling SNMP access on the FortiAuthenticator interface?
(Choose two)
- A. Associate an ASN, 1 mapping rule to the receiving host
- B. Set the tresholds to trigger SNMP traps
- C. Enable logging services
- D. Upload management information base (MIB) files to SNMP server
Answer: B,D
NEW QUESTION 24
What happens when a certificate is revoked? (Choose two)
- A. All certificates signed by a revoked CA certificate are automatically revoked
- B. Revoked certificates are automatically added to the CRL
- C. External CAs will priodically query Fortiauthenticator and automatically download revoked certificates
- D. Revoked certificates cannot be reinstated for any reason
Answer: B,C
NEW QUESTION 25
Which two types of digital certificates can you create in Fortiauthenticator? (Choose two)
- A. Organization validation certificate
- B. Third-party root certificate
- C. Usercertificate
- D. Local service certificate
Answer: C,D
NEW QUESTION 26
......
Valid Way To Pass Fortinet's NSE6_FAC-6.1 Exam with : https://lead2pass.examdumpsvce.com/NSE6_FAC-6.1-valid-exam-dumps.html
