Online Access Free NSE6_FAC-6.4 Exam Questions

An administrator has an active directory (AD) server integrated with FortiAuthenticator. They want members of only specific AD groups to participate in FSSO with their corporate FortiGate firewalls.
How does the administrator accomplish this goal?

• A.Configure a domain groupings list to identify the desired AD groups.
• B.Configure SSO groups and assign them to FortiGate groups.
• C.Configure fine-grained controls on FortiAuthenticator to designate AD groups.
• D.Configure a FortiGate filter on FortiAuthenticatoc

You are the administrator of a global enterprise with three FortiAuthenticator devices. You would like to deploy them to provide active-passive HA at headquarters, with geographically distributed load balancing.
What would the role settings be?

• A.One standalone and two load balancers
• B.One standalone primary, one cluster member, and one load balancer
• C.Two cluster members and one load balancer
• D.Two cluster members and one backup

When you are setting up two FortiAuthenticator devices in active-passive HA, which HA role must you select on the master FortiAuthenticator?

• A.Cluster member
• B.Standalone master
• C.Load balancing master
• D.Active-passive master

When generating a TOTP for two-factor authentication, what two pieces of information are used by the algorithm to generate the TOTP?

• A.Time and FortiAuthenticator serial number
• B.UUID and time
• C.Time and mobile location
• D.Time and seed

Which two are supported captive or guest portal authentication methods? (Choose two)

• A.Instagram
• B.Linkedln
• C.Apple ID
• D.Email