Free Fortinet NSE6_FAC-6.4 Practice Exam with Questions & Answers | Set: 2

Online activation of the tokens through the FortiGuard network is the most secure way of delivering FortiToken data once the token has been seeded because it eliminates the risk of seed files being compromised during transit or storage. The other methods involve physical or manual delivery of seed files which can be intercepted, lost, or stolen. References: https://docs.fortinet.com/document/fortiauthenticator/6.4/administration-guide/372403/fortitoken

SP-initiated SSO SAML packet flow for a host without a SAML assertion is as follows:

• Principal contacts service provider, requesting access to a protected resource.
• Service provider redirects principal to identity provider, sending a SAML authentication request.
• Principal authenticates with identity provider using their credentials.
• After successful authentication, identity provider redirects principal back to service provider, sending a SAML response with a SAML assertion containing the principal’s attributes.
• Service provider validates the SAML response and assertion, and grants access to the principal.

References: https://docs.fortinet.com/document/fortiauthenticator/6.4.0/administration-guide/906179/saml-service-provider#sp-initiated-sso

Two features of FortiAuthenticator that are used for EAP deployment are certificate authority and RADIUS server. Certificate authority allows FortiAuthenticator to issue and manage digital certificates for EAP methods that require certificate-based authentication, such as EAP-TLS or PEAP-EAP-TLS. RADIUS server allows FortiAuthenticator to act as an authentication server for EAP methods that use RADIUS as a transport protocol, such as EAP-GTC or PEAP-MSCHAPV2.

References: https://docs.fortinet.com/document/fortiauthenticator/6.4.0/administration-guide/906179/wireless-802-1x-authentication

Two statements about the self-service portal are true:

• Self-registration information can be sent to the user through email or SMS using the notification templates feature. This feature allows administrators to customize the messages that are sent to users when they register or perform other actions on the self-service portal.
• Realms can be used to configure which self-registered users or groups can authenticate on the network using the realm-based authentication feature. This feature allows administrators to apply different authentication policies and settings to different groups of users based on their realm membership.

References: https://docs.fortinet.com/document/fortiauthenticator/6.4.0/administration-guide/906179/user-management#self-registration https://docs.fortinet.com/document/fortiauthenticator/6.4.0/administration-guide/906179/user-management#realms