Free Fortinet NSE6_FAC-6.4 Exam Dumps Questions & Answers

Which statement about captive portal policies is true, assuming a single policy has been defined?

• A.  All conditions in the policy must match before a user is presented with the captive portal.
• B.  Conditions in the policy apply only to wireless users.
• C.  Portal policies apply only to authentication requests coming from unknown RADIUS clients
• D.  Portal policies can be used only for BYODs.

Which option correctly describes an SP-initiated SSO SAML packet flow for a host without a SAML assertion?

• A.  Principal contacts idendity provider and is redirected to service provider, principal establishes connection with service provider, service provider validates authentication with identify provider
• B.  Principal contacts service provider, service provider redirects principal to idendity provider, after succesfull authentication identify provider redirects principal to service provider
• C.  Service provider contacts idendity provider, idendity provider validates principal for service provider, service provider establishes communication with principal
• D.  Principal contacts idendity provider and authenticates, identity provider relays principal to service provider after valid authentication

Which method is the most secure way of delivering FortiToken data once the token has been seeded?

• A.  Automatic token generation using FortiAuthenticator
• B.  Shipment of the seed files on a CD using a tamper-evident envelope
• C.  Using the in-house token provisioning tool
• D.  Online activation of the tokens through the FortiGuard network

Which interface services must be enabled for the SCEP client to connect to Authenticator?

• A.  HTTP/HTTPS
• B.  SSH
• C.  OCSP
• D.  REST API

Which two features of FortiAuthenticator are used for EAP deployment? (Choose two)

• A.  MAC authentication bypass
• B.  Certificate authority
• C.  LDAP server
• D.  RADIUS server