NSE6_FAC-6.4 Dumps By Pros – 1st Attempt Guaranteed Success [Q12-Q34]

Q12. Which three of the following can be used as SSO sources? (Choose three)

Q13. An administrator has an active directory (AD) server integrated with FortiAuthenticator. They want members of only specific AD groups to participate in FSSO with their corporate FortiGate firewalls.
How does the administrator accomplish this goal?

Q14. Examine the screenshot shown in the exhibit.

Which two statements regarding the configuration are true? (Choose two.)

Q15. Which statement about captive portal policies is true, assuming a single policy has been defined?

Q16. Which option correctly describes an SP-initiated SSO SAML packet flow for a host without a SAML assertion?

Q17. When generating a TOTP for two-factor authentication, what two pieces of information are used by the algorithm to generate the TOTP?

Q18. Which statement about the assignment of permissions for sponsor and administrator accounts is true?

Q19. Which two capabilities does FortiAuthenticator offer when acting as a self-signed or local CA? (Choose two)

Q20. Which two protocols are the default management access protocols for administrative access for FortiAuthenticator? (Choose two)

Q21. When generating a TOTP for two-factor authentication, what two pieces of information are used by the algorithm to generate the TOTP?

Q22. Which network configuration is required when deploying FortiAuthenticator for portal services?

Q23. At a minimum, which two configurations are required to enable guest portal services on FortiAuthenticator? (Choose two)

Q24. You have implemented two-factor authentication to enhance security to sensitive enterprise systems.
How could you bypass the need for two-factor authentication for users accessing form specific secured networks?

Q25. An administrator wants to keep local CA cryptographic keys stored in a central location.
Which FortiAuthenticator feature would provide this functionality?

Q26. Which two features of FortiAuthenticator are used for EAP deployment? (Choose two)

Q27. A device or user identity cannot be established transparently, such as with non-domain BYOD devices, and allow users to create their own credentialis.
In this case, which user idendity discovery method can Fortiauthenticator use?

Q28. You want to monitor FortiAuthenticator system information and receive FortiAuthenticator traps through SNMP.
Which two configurations must be performed after enabling SNMP access on the FortiAuthenticator interface? (Choose two)

Q29. A system administrator wants to integrate FortiAuthenticator with an existing identity management system with the goal of authenticating and deauthenticating users into FSSO.
What feature does FortiAuthenticator offer for this type of integration?

Q30. When you are setting up two FortiAuthenticator devices in active-passive HA, which HA role must you select on the master FortiAuthenticator?