[Sep 28, 2022] Today Updated NSE6_FAC-6.1 Exam Dumps Actual Questions [Q10-Q27]

NEW QUESTION 10
A device or useridentity cannot be established transparently, such as with non-domain BYOD devices, and allow users to create their own credentialis.
In this case, which user idendity discovery method can Fortiauthenticator use?

Syslog messaging or SAML IDP

Kerberos-base authentication

Radius accounting

Portal authentication

NEW QUESTION 11
Which two SAML roles can Fortiauthenticator be configured as? (Choose two)

Idendity provider

Principal

Assertion server

Service provider

NEW QUESTION 12
You are a Wi-Fi provider and host multiple domains. How do you delegate user accounts, user groups and permissions per domain when theyare authenticating on a single FortiAuthenticator device?

Automatically import hosts from each domain as they authenticate

Create multiple directory trees on FortiAuthenticator

Create realms

Create user groups

NEW QUESTION 13
Which network configuration is required when deploying FortiAuthenticator for portal services?

FortiAuthenticator must have the REST API access enable on port1

One of the DNS servers must be a FortiGuard DNS server

Fortigate must be setup as default gateway for FortiAuthenticator

Policies must have specific ports open between FortiAuthenticator and the authentication clients

NEW QUESTION 14
You want to monitor FortiAuthenticator system information and receive FortiAuthenticator traps through SNMP.
Which two configurations must be performed after enabling SNMP access on the FortiAuthenticator interface?
(Choose two)

Enable logging services

Set the tresholds to trigger SNMP traps

Upload management information base (MIB) files to SNMP server

Associate an ASN, 1 mapping rule to the receiving host

NEW QUESTION 15
At a minimum, which two configurations are required to enable guest portal services on FortiAuthenticator?
(Choose two)

Configuring a portal policy

Configuring at least on post-login service

Configuring a RADIUS client

Configuring an external authentication portal

NEW QUESTION 16
Which statement about the guest portal policies is true?

Guest portal policies apply only to authentication requests coming from unknown RADIUS clients

Guest portal policies can be used only for BYODs

Conditions in the policy apply only to guest wireless users

All conditions in the policy must match before a user is presented with the guest portal

NEW QUESTION 17
Which two are supported captive or guest portal authentication methods? (Choose two)

Linkedln

Apple ID

Instagram

Email

NEW QUESTION 18
Which behaviors exist for certificate revocation lists (CRLs) on FortiAuthenticator? (Choose two)

CRLs contain the serial number of the certificate that has been revoked

Revoked certificates are automaticlly placed on the CRL

CRLs can beexported only through the SCEP server

All local CAs share the same CRLs

NEW QUESTION 19
Which FSSO discovery method transparently detects logged off users without having to rely on external features such as WMI polling?

Windows AD polling

FortiClient SSO Mobility Agent

Radius Accounting

DC Polling

NEW QUESTION 20
You are the administrator of a large network that includes a large local user datadabase on the current Fortiauthenticatior. You want to import all the local users into a new Fortiauthenticator device.
Which method should you use to migrate the local users?

Import users using RADIUS accounting updates.

Import the current directory structure.

Import users fromRADUIS.

Import users using a CSV file.

NEW QUESTION 21
Which EAP method is known as the outer authentication method?

PEAP

EAP-GTC

EAP-TLS

MSCHAPV2