NSE6_FAC-6.4 무료 덤프문제 온라인 액세스

Which two capabilities does FortiAuthenticator offer when acting as a self-signed or local CA? (Choose two)

• A.Importing other CA certificates and CRLs
• B.Creating, signing, and revoking of X.509 certificates
• C.Validating other CA CRLs using OSCP
• D.Merging local and remote CRLs using SCEP

What capability does the inbound proxy setting provide?

• A.It allows FortiAuthenticator the ability to round robin load balance remote authentication servers.
• B.It allows FortiAuthenticator to determine the origin source IP address after traffic passes through a proxy for system access,
• C.It allows FortiAuthenticator system access to authenticating users, based on a geo IP address designation.
• D.It allows FortiAuthenticator to act as a proxy for remote authentication servers.

Which network configuration is required when deploying FortiAuthenticator for portal services?

• A.One of the DNS servers must be a FortiGuard DNS server
• B.Policies must have specific ports open between FortiAuthenticator and the authentication clients
• C.Fortigate must be setup as default gateway for FortiAuthenticator
• D.FortiAuthenticator must have the REST API access enable on port1

What happens when a certificate is revoked? (Choose two)

• A.All certificates signed by a revoked CA certificate are automatically revoked
• B.Revoked certificates are automatically added to the CRL
• C.External CAs will priodically query Fortiauthenticator and automatically download revoked certificates
• D.Revoked certificates cannot be reinstated for any reason

A device or user identity cannot be established transparently, such as with non-domain BYOD devices, and allow users to create their own credentialis.
In this case, which user idendity discovery method can Fortiauthenticator use?

• A.Portal authentication
• B.Syslog messaging or SAML IDP
• C.Radius accounting
• D.Kerberos-base authentication