Quiz
FATh
Erstelle ein kostenloses Konto, um dieses Quiz zu beenden
Speichere deinen Fortschritt und sieh dir dein Endergebnis an.
oder mit deiner E-Mail registrieren
Schon ein Konto? Anmelden
Fragen in diesem Quiz (30)
1Which statements are true about the rADIUS service on FortiAuthenticator? (Choose two.)
- AFortiAuthenticator only answers to RADIUS clients that are registered with FortiAuthenticator
- BLocal users can be authenticated through RADIUS
- CAdministrator users can be authenticater through RADIUS
- DRADIUS clients must accept the RADIUS challenge responde method if using two-factor authentication
2Which interface services must be enabled for the SCEP client to connect to FortiAuthenticator?
- AOCSP
- BREST API
- CSSH
- DHTTP/HTTPS
3Which FSSO discovery method transparently detects logged off users without having to rely on external features such as WMI polling?
- AWindows AD polling
- BFortiClient SSO mobility agent
- CRadius accounting
- DDC polling
4How can SAML metadata file be used?
- ATo define a list of trusted user names
- BTo import the required IDP configuration
- CTo correlate the ID address to its hostname
- DTo resolve the IDP realm for authentication
5Which two are supported captive or guest portal authentication methods? (Choose two.)
- ALinkedIn
- BApple ID
- CInstagram
- DEmail
6Which option correctly describes an SP-initiated SSO SAML packet flow for a host without a SAML assertion?
- AService provider contacts identity provider validates principal for service provider, service provider establishes communication with principal
- BPrincipal contacts identity provider and is redirect to service provider, principal establishes connection with service provider, service provider validates authentication with identity provider
- CPrincipal contacts service provider, service provider redirects principal to identity provider, after succeful authentication identity provider redirects principal to service provider
- DPrincipal contacts identity provider an authenticates, identity provider relays principal to service provider after valid authentication
7A device or user identity cannot be established transparently, such as with non-domain BYOD devices, and allow users to create their own credencials. It this case, which user identity discovery method can FortiAuthenticator use?
- ASyslog messaging or SAML IdP
- BKerberos-bases authentication
- CRADIUS accounting
- DPortal authentication
8Which two SAML roles can FortiAuthenticator be configured as? (Choose two.)
- AIdentity provider
- BPrincipal
- CAssention server
- DService provider
9What happen when a certificate is revoked? (Choose two.)
- ARevoked certificates cannot be reinstaled for any reason
- BAll certificates signed by a revoked CA certificate are automatically revoked
- CRevoked certificates are automatically addeded to the CRL
- DExternal CAs will periodically query FortiAuthenticator and automatically download revoked certificates
10Which two types of digital certificates can you create in FortiAuthenticator? (Choose two.)
- AUser certificate
- BOrganization validation certificate
- CThird-party root certificate
- DLocal services certificate
11You are the administrator of a large network that includes a large local user database on the current FortiAuthenticator. You want to import all the local users into a new FortiAuthenticator device.
- AImport users using RADIUS accounting updates
- BImport the current directory structure.
- CImport users from RADIUS.
- DImport users using a CSV file
12Which three of the following can be used as SSO sources? (Choose three.)
- AFortiClient SSO Mobility Agent
- BSSH sessions
- CFortiAuthenticator in SAML SP role
- DFortigate
- ERADIUS accounting
13Which two capabilities does FortiAuthenticatos offer when acting as a self-signed or local CA? (Choose two.)
- AValidating other CA CRLs using OCSP
- BImporting other CA certificates and CRLs
- CMerging local and remote CRLs using SCEP
- DCreating, signing, and revoking of X.509 certificates
14Which statement about the guest portal polices is true?
- AGuest portal policies apply only to authentication requests coming from unknown RADIUS clients
- BGuest portal policies can be used only fort BYODs
- CConditions in the policy aply only to guest wireless users
- DAll conditions in the policy must match before a user is presented with the guest portal
15Refer to the exhibit
Examine the screenshot shown in the exhibit
Which two statements regarding the configuration are true? (Choose two.)
- AAll guest accounts created using the account registration feature will be placed unter the Guest_Portal_Users group
- BAll accounts registered through the guest portal must be validated throught email
- CGuest users must fill in all the fields on the registration form
- DGuest user account will expire after eight hours
16Which EAP method is known as the outer authentication method?
- APEAP
- BEAP-GTC
- CEAP-TLS
- DMSCHAPv2
17When you are setting up two FortiAuthenticator devices in active-passive HA, which HA role must you select on the master FortiAuthenticator?
- AActive-passive master
- BStandalone master
- CCluster member
- DLoad balancing master
18Which two statements about the EAP-TTLS authentication method are true? (Choose two.)
- AUses mutual authentication
- BUses digital certificates only on the server side
- CRequires an EAP server certificate
- DSupports a port access control (wired) solution only
19You are a FortiAuthenticator administrator for a large organization. Users who are configured yo use FortiToken 200 for two-factor authentication can no longer authenticate. You have verified that only the users with two-factor authentication are experiencing the issue.
- AOne of the FortiAuthenticator devices in the active-active cluster has failed
- BFortiAuthenticator has lost contact with the FortiToken Cloud servers
- CFortiToken 200 license has expired
- DTime drift between FortiAuthenticator and hardware tokens
20Which behaviors exist for certificate revocation lists (CRLs) on FortiAuthenticator? (Choose two.)
- ACRLs contain the serial number of the certificate that has been revoked
- BRevoked certificates are automatically placed on the CRL
- CCRLs can be exported only through the SCEP server
- DAll local CAs share the same CRLs
21Which two features of FortiAuthenticator are used for EAP deployment? (Choose two.)
- ACertificate authority
- BLDAP server
- CMAC authentication bypass
- DRADIUS server
22Which two statements about the self-service portal are true? (Choose two.)
- ASelf-registration information can be sent to the user through email or SMS
- BRealms can be used to configure which self-registered users or groups can authenticate on the network.
- CAdministrator approval is required for all self-registrations
- DAuthenticating users must specify domain name along with username
23Which of the following is an OATH-based standard to generate event-based, one-time password tokens?
- AOLTP
- BSOTP
- CHOTP
- DTOTP
24You are a Wi-Fi provider and host multiple domains. How do you delegate user accounts, user groups and permissions per domain when they are authenticating on a single FortiAuthenticator device?
- AAutomatically import hosts from each domain as they authenticate
- BCreate multiple directory trees on FortiAuthenticator
- CCreate realms
- DCreate user groups
25Which network configuration is required when deploying FortiAuthenticator for portal services??
- AFortiAuthenticator must have the REST API access enabled on port1
- BOne of the DNS servers must be a FortiGuard DNS server
- CFortiGUard must be set up as the default gateway fort FortiAuthenticator
- DPolicies must have specific ports open between FortiAuthenticator and the authentication clients
26What are three key features of FortiAuthenticator? (Choose three.)
- AIdentity management device
- BLog server
- CCertificate authority
- DPortal service
- ERSSO server
27Which two protocols are the default management access protocol for administrative access to FortiAuthenticator? (Choose two.)
- ATelnet
- BHTTPS
- CSSH
- DSNMP
28 Which method is the most secure way of delivering FortiToken data once the token has been seeded?
- AOnline activation of the tokens through the FortiGuard network
- BShipment of the seed files on a CD using a tamper-evident envelope
- CUsing the in-house token provisioning tool
- DAutomatic token generation using FortiAuthenticator
29You want to monitor FortiAuthenticator system information and receive FortiAuthenticator traps through SNMP.
Which two configurations must be performed after enabling SNMP access on the FortiAuthenticator interface? (Choose two.)- AEnable logging service
- BSet the thesholds to trigger SNMP traps
- CUpload management information base (MIB) files to SNMP server
- DAssociate an ASN1 mapping rule to the receiving host
30At a minimum, which two configurations are required to enable guest portal services on FortiAuthenticator? (Choose two.)
- AConfiguring a portal policy
- BConfiguring at least on post-login service
- CConfiguring a RADIUS client
- DConfiguring an external authentication portal
Informationen
- Beschreibung
- FortiAuthenticator
- Autor
- osvaldo linconir
- Sprache
- Español
- Aufrufe
- 40
- Schlagwörter
- Bewertung
- Noch keine Bewertungen Bewerte dieses Quiz