NSE6_FAC-6.4 Practice Exams and Training Solutions for Certifications [Q15-Q35] : Top Exam Collection : http://blog.topexamcollection.com

このページはTop Exam Collectionからエクスポートしたものです。 [ http://blog.topexamcollection.com ]
Export date: Sun Jan 19 20:48:06 2025 / +0000 GMT

NSE6_FAC-6.4認定資格[Q15-Q35]のための模擬試験とトレーニングソリューション

NSE6_FAC-6.4 Practice Exams and Training Solutions for Certifications

Dumps Free Test Engine Player Verified Answers

新しい質問15
You want to monitor FortiAuthenticator system information and receive FortiAuthenticator traps through SNMP.
Which two configurations must be performed after enabling SNMP access on the FortiAuthenticator interface? (Choose two)

Enable logging services

Set the tresholds to trigger SNMP traps

Upload management information base (MIB) files to SNMP server

Associate an ASN, 1 mapping rule to the receiving host

新しい質問16
At a minimum, which two configurations are required to enable guest portal services on FortiAuthenticator? (Choose two)

Configuring a portal policy

Configuring at least on post-login service

Configuring a RADIUS client

Configuring an external authentication portal

新しい質問 17
You are an administrator for a large enterprise and you want to delegate the creation and management of guest users to a group of sponsors.
How would you associate the guest accounts with individual sponsors?

As an administrator, you can assign guest groups to individual sponsors.

Guest accounts are associated with the sponsor that creates the guest account.

You can automatically add guest accounts to groups associated with specific sponsors.

Select the sponsor on the guest portal, during registration.

新しい質問18
Which three of the following can be used as SSO sources? (Choose three)

FortiClient SSO Mobility Agent

SSH Sessions

FortiAuthenticator in SAML SP role

Fortigate

RADIUS accounting

新しい質問 19
FortiAuthenticator の管理アクセス用のデフォルトの管理アクセスプロトコルは、どの 2 つのプロトコルですか?(2つ選択)

テルネット

HTTPS

SSH

SNMP

新しい質問 20
Why would you configure an OCSP responder URL in an end-entity certificate?

To designate the SCEP server to use for CRL updates for that certificate

To identify the end point that a certificate has been assigned to

To designate a server for certificate status checking

To provide the CRL location for the certificate

新しい質問21
Examine the screenshot shown in the exhibit.

Which two statements regarding the configuration are true? (Choose two.)

All guest accounts created using the account registration feature will be placed under the Guest_Portal_Users group

All accounts registered through the guest portal must be validated through email

Guest users must fill in all the fields on the registration form

Guest user account will expire after eight hours

新しい質問22
A system administrator wants to integrate FortiAuthenticator with an existing identity management system with the goal of authenticating and deauthenticating users into FSSO.
What feature does FortiAuthenticator offer for this type of integration?

The ability to import and export users from CSV files

RADIUS learning mode for migrating users

REST API

SNMP monitoring and traps

新しい質問23
What happens when a certificate is revoked? (Choose two)

Revoked certificates cannot be reinstated for any reason

All certificates signed by a revoked CA certificate are automatically revoked

Revoked certificates are automatically added to the CRL

External CAs will priodically query Fortiauthenticator and automatically download revoked certificates

新しい質問24
When you are setting up two FortiAuthenticator devices in active-passive HA, which HA role must you select on the master FortiAuthenticator?

アクティブ・パッシブ・マスター

スタンドアロン・マスター

クラスタメンバー

ロードバランシングマスター

新しい質問25
FortiAuthenticator の RADIUS サービスに関する 2 つの記述のうち、正しいものはどれですか?(2つ選択してください)

RADIUS 認証を使用している場合、二要素認証を強制することはできません。

RADIUSユーザーをLDAPユーザーに移行可能

RADIUSで認証できるのはローカルユーザーのみ

FortiAuthenticator は、FortiAuthenticator に登録されている RADIUS クライアントのみに応答します。

新しい質問26
Which behaviors exist for certificate revocation lists (CRLs) on FortiAuthenticator? (Choose two)

CRLs contain the serial number of the certificate that has been revoked

Revoked certificates are automaticlly placed on the CRL

CRLs can be exported only through the SCEP server

All local CAs share the same CRLs

新しい質問 27
Which FSSO discovery method transparently detects logged off users without having to rely on external features such as WMI polling?

Windows AD polling

FortiClient SSO Mobility Agent

Radius Accounting

DC Polling

新しい質問 28
You have implemented two-factor authentication to enhance security to sensitive enterprise systems.
How could you bypass the need for two-factor authentication for users accessing form specific secured networks?

Create an admin realm in the authentication policy

Specify the appropriate RADIUS clients in the authentication policy

Enable Adaptive Authentication in the portal policy

Enable the Resolve user geolocation from their IP address option in the authentication policy.

新しい質問 29
When generating a TOTP for two-factor authentication, what two pieces of information are used by the algorithm to generate the TOTP?

UUID and time

Time and FortiAuthenticator serial number

Time and seed

Time and mobile location

新しい質問 30
FortiAuthenticator が自己署名 CA またはローカル CA として動作する際に提供する 2 つの機能はどれですか。(2つ選択してください)

OSCP を使用した他の CA CRL の検証

他の CA 証明書および CRL のインポート

SCEPを使用したローカルとリモートのCRLのマージ

X.509 証明書の作成、署名、失効

新しい質問 31
ゲストポータルポリシーに関する記述のうち、正しいものはどれか。

ゲストポータルポリシーは、未知のRADIUSクライアントからの認証リクエストにのみ適用されます。

ゲスト・ポータル・ポリシーはBYODにのみ使用できる

ポリシーの条件は、ゲストワイヤレスユーザーにのみ適用されます。

ユーザーにゲストポータルが表示される前に、ポリシーのすべての条件が一致する必要があります。

新しい質問32
FortiAuthenticator の主な機能を 3 つ教えてください。(3つ選んでください）

アイデンティティ管理装置

ログサーバー

認証局

ポータルサービス

RSSOサーバー

新しい質問33
Which two features of FortiAuthenticator are used for EAP deployment? (Choose two)

認証局

LDAP server

MAC authentication bypass

RADIUS server