Online Access Free NSE6_FAC-6.4 Exam Questions

Which two features of FortiAuthenticator are used for EAP deployment? (Choose two)

• A.MAC authentication bypass
• B.RADIUS server
• C.LDAP server
• D.Certificate authority

Which method is the most secure way of delivering FortiToken data once the token has been seeded?

• A.Automatic token generation using FortiAuthenticator
• B.Using the in-house token provisioning tool
• C.Online activation of the tokens through the FortiGuard network
• D.Shipment of the seed files on a CD using a tamper-evident envelope

Which of the following is an OATH-based standard to generate event-based, one-time password tokens?

• A.TOTP
• B.SOTP
• C.HOTP
• D.OLTP

Which option correctly describes an SP-initiated SSO SAML packet flow for a host without a SAML assertion?

• A.Service provider contacts idendity provider, idendity provider validates principal for service provider, service provider establishes communication with principal
• B.Principal contacts service provider, service provider redirects principal to idendity provider, after succesfull authentication identify provider redirects principal to service provider
• C.Principal contacts idendity provider and is redirected to service provider, principal establishes connection with service provider, service provider validates authentication with identify provider
• D.Principal contacts idendity provider and authenticates, identity provider relays principal to service provider after valid authentication

Which statement about captive portal policies is true, assuming a single policy has been defined?

• A.All conditions in the policy must match before a user is presented with the captive portal.
• B.Portal policies apply only to authentication requests coming from unknown RADIUS clients
• C.Portal policies can be used only for BYODs.
• D.Conditions in the policy apply only to wireless users.