[Feb-2023] Verified Fortinet Exam Dumps with NSE6_FAC-6.1 Exam Study Guide [Q15-Q34]

Rate this post

[Feb-2023] Verified Fortinet Exam Dumps with NSE6_FAC-6.1 Exam Study Guide

Best Quality Fortinet NSE6_FAC-6.1 Exam Questions PassLeaderVCE Realistic Practice Exams [2023]

NEW QUESTION 15
You are a FortiAuthenticator administrator for a large organization. Users who are configured to use FortiToken 200 for two-factor authentication can no longer authenticate. You have verified that only the users with two-factor authentication are experiencing the issue.
What can couse this issue?

On of the FortiAuthenticator devices in the active-active cluster has failed

FortiAuthenticator has lose contact with the FortiToken Cloud servers

FortiToken 200 licence has expired

Time drift between FortiAuthenticator and hardware tokens

NEW QUESTION 16
Which method is the most secure way of delivering FortiToken data once the token has been seeded?

Online activation of the tokens through the FortiGuard network

Shipment of the seed files on a CD using a tamper-evident envelope

Using the in-house token provisioning tool

Automatic token generation using FortiAuthenticator

NEW QUESTION 17
Which two statements about the self-service portal are true? (Choose two)

Self-registration information can be sent to the user through email or SMS

Realms can be used to configure which seld-registeredusers or groups can authenticate on the network

Administrator approval is required for all self-registration

Authenticating users must specify domain name along with username

NEW QUESTION 18
At a minimum, which two configurations are required to enable guest portal services on FortiAuthenticator?
(Choose two)

Configuring a portal policy

Configuring at least on post-login service

Configuring a RADIUS client

Configuring an external authentication portal

NEW QUESTION 19
A device or useridentity cannot be established transparently, such as with non-domain BYOD devices, and allow users to create their own credentialis.
In this case, which user idendity discovery method can Fortiauthenticator use?

Syslog messaging or SAML IDP

Kerberos-base authentication

Radius accounting

Portal authentication

NEW QUESTION 20
Which network configuration is required when deploying FortiAuthenticator for portal services?

FortiAuthenticator must have the REST API access enable on port1

One of the DNS servers must be a FortiGuard DNS server

Fortigate must be setup as default gateway for FortiAuthenticator

Policies must have specific ports open between FortiAuthenticator and the authentication clients

NEW QUESTION 21
Which two statement about the RADIUS service on FortiAuthenticator are true? (Choose two)

Two-factor authentication cannot be enforced when using RADIUS authentication

RADIUS users can migrated to LDAP users

Only local users can be authenticated through RADIUS

FortiAuthenticator answers only to RADIUS client that are registered with FortiAuthenticator

NEW QUESTION 22
You want to monitor FortiAuthenticator system information and receive FortiAuthenticator traps through SNMP.
Which two configurations must be performed after enabling SNMP access on the FortiAuthenticator interface?
(Choose two)

Enable logging services

Set the tresholds to trigger SNMP traps

Upload management information base (MIB) files to SNMP server

Associate an ASN, 1 mapping rule to the receiving host

NEW QUESTION 23
Which two types of digital certificates can you create in Fortiauthenticator? (Choose two)

Usercertificate

Organization validation certificate

Third-party root certificate

Local service certificate

NEW QUESTION 24
How can a SAML metada file be used?

To defined a list of trusted user names

To import the required IDP configuration

To correlate the IDP address to its hostname

To resolve the IDP realm for authentication

NEW QUESTION 25
You are a Wi-Fi provider and host multiple domains. How do you delegate user accounts, user groups and permissions per domain when theyare authenticating on a single FortiAuthenticator device?

Automatically import hosts from each domain as they authenticate

Create multiple directory trees on FortiAuthenticator

Create realms

Create user groups

NEW QUESTION 26
Which two features of FortiAuthenticator are used for EAP deployment? (Choose two)

Certificate authority

LDAP server

MAC authentication bypass

RADIUS server

Loading …