nse6_fac-61 Exam Questions

Here you have the best Fortinet nse6_fac-61 practice exam questions.

Some things you may want to keep in mind about this practice exam questions:

You have 30 total questions to study from
Each page has 5 questions, making a total of 6 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on September 18, 2024

Question 1 of 30

A device or user identity cannot be established transparently, such as with non-domain BYOD devices, and allow users to create their own credentials.

In this case, which user identity discovery method can FortiAuthenticator use?

A.

RADIUS accounting

B.

Kerberos-based authentication

C.

Portal authentication

D.

Syslog messaging or SAMI IdP

Correct Answer: C

Portal authentication is the appropriate method in this scenario because it allows users to create their own credentials when a device or user identity cannot be established transparently. This method is commonly used for non-domain BYOD (Bring Your Own Device) devices where traditional methods like RADIUS accounting, Kerberos-based authentication, or Syslog messaging are not suitable.

Question 2 of 30

What are three key features of FortiAuthenticator? (Choose three.)

A.

RSSO server

B.

Log server

C.

Portal services

D.

Certificate authority

E.

Identity management device

Correct Answer: CDE

FortiAuthenticator is primarily known for three key features: portal services, certificate authority, and identity management device. Portal services provide user interfaces for authentication and self-service, the certificate authority feature handles certificate issuance and management, and identity management device ensures secure user authentication and access control. These features align with the primary functionalities and purposes of the FortiAuthenticator device.

Question 3 of 30

Which two capabilities does FortiAuthenticator offer when acting as a self-signed or local CA? (Choose two.)

A.

Merging local and remote CRLs using SCEP

B.

Creating, signing, and revoking of X.509 certificates

C.

Validating other CA CRLs using OCSP

D.

Importing other CA certificates and CRLs

Correct Answer: BD

When acting as a self-signed or local Certificate Authority (CA), FortiAuthenticator can create, sign, and revoke X.509 certificates, allowing it to manage certificates within the local network. Additionally, it can import other CA certificates and Certificate Revocation Lists (CRLs), providing flexibility in managing and validating external certificates.

Question 4 of 30

Which two are supported captive or guest portal authentication methods? (Choose two.)

A.

B.

Email

C.

Apple ID

D.

Instagram

Correct Answer: BC

Email is a supported captive or guest portal authentication method as systems can send temporary login credentials to users via email. Apple ID is also a supported method as it allows users to authenticate using their existing Apple credentials. LinkedIn and Instagram are not commonly supported for this purpose.

Question 5 of 30

What happens when a certificate is revoked? (Choose two.)

A.

External CAs will periodically query FortiAuthenticator and automatically download revoked certificates

B.

Revoked certificates are automatically added to the CRL

C.

All certificates signed by a revoked CA certificate are automatically revoked

D.

Revoked certificates cannot be reinstated for any reason

Correct Answer: BC

When a certificate is revoked, it is typically added to the Certificate Revocation List (CRL), which aids in informing systems about invalid certificates. Furthermore, if a CA certificate itself is revoked, all certificates that were signed by that CA certificate are automatically considered revoked because the trust chain is broken.