FortiAuthenticator 6.1

Which two features of Fortiauthenticator are used for EAP deployment? (Choose two)

• Certificate authority

• LDAP server

• MAC authentication bypass

• RADIUS server

Which Network configuration is required when deploying fortiauthenticator for portal services?

• Fortiauthenticator must have the REST API access enable on port1

• One of the DNS servers must be a Fortiguard DNS server

• Fortigate must be setup as default gateway for FortiAuthenticator

• Policies must have specific ports open between Fortiauthenticator and the authentication clients

Which method is the most secure way of delivering fortitoken data once the token has been seeded?

• Online activation of the tokens through the fortiguard network

• Shipment of the seed files on a CD using a tamper-evident envelope

• Using the in-house token provisioning toll

• Automatic token generation using Fortiauthenticator

At a minimum which two configurations are required to enable guest portal services on Fortiauthenticator? (Choose two)

• Configuring a portal policy

• Configuring at least on post-login service

• Configuring a RADIUS client

• Configuring an external authentication portal

What happens when a certificate is revoked? (Choose two)

• Revoked certificates cannot be reinstated for any reason

• All certificates signed by a revoked CA certificate are automatically revoked

• Revoked certificates are automatically added to the CRL

• External CAs will periodically query Fortiauthenticator and automatically download revoked certificates

Which three of the following can be used as SSO sources? (Choose three)

• Forticlient SSO Mobility Agent

• SSH Sessions

• FortiAuthenticator in SAML SP role

• Fortigate

• RADIUS accounting

Which statement about the guest portal policies is true?

• Guest portal policies apply only to authentication request coming from unknown RADIUS clients

• Guest portal policies can be used only fo BYODs

• Conditions in the policy apply only to guest wireless users

• All conditions in the policy must match before a user is presented with the guest portal

Which option correctly describes an SP-initiated SSO SAML packet flow for a host without a SAML assertion?

• Service provider contacts idendity provider, idendity provider validates principal for service provider, service provider establishes communication with principal.

• Principal contacts idendity provider and is redirected to service provider, principal establishes connection with service provider, service provider validates authentication with identity provider.

• Principal contacts service provider, service provider redirects principal to idendity provider, after successful authentication identify provider redirects principal to service provider.

• Principal contacts idendity provider and authenticates, identity provider relays principal to service provider after valid authentication

How can a SAML metada file be used?

• To defined a list of trusted user names

• To import the required IDP configuration

• To correlate the IDP address to its hostname

• To resolve the IDP realm for authentication

What are three key features of fortiauthenticator? (Choose three)

• Identity management device

• Log Sever

• Certificate Authority

• Portal services

• RSSO Server