Free NSE6_FAC-6.4 Sample Questions — Fortinet NSE 6 - FortiAuthenticator 6.4

You are a Wi-Fi provider and host multiple domains. How do you delegate user accounts, user groups and permissions per domain when they are authenticating on a single FortiAuthenticator device?

• A. Create realms
• B. Create user groups
• C. Create multiple directory trees on FortiAuthenticator
• D. Automatically import hosts from each domain as they authenticate

Which two types of digital certificates can you create in FortiAuthenticator? (Choose two.)

• A. Third-party root certificate
• B. User certificate
• C. Organization validation certificate
• D. Local services certificate

You are a FortiAuthenticator administrator for a large organization. Users who are configured to use FortiToken 200 for two-factor authentication can no longer authenticate. You have verified that only the users with two-factor authentication are experiencing the issue. What can cause this issue?

• A. FortiToken 200 license has expired
• B. One of the FortiAuthenticator devices in the active-active cluster has failed
• C. Time drift between FortiAuthenticator and hardware tokens
• D. FortiAuthenticator has lost contact with the FortiToken Cloud servers

Which two protocols are the default management access protocols for administrative access to FortiAuthenticator? (Choose two.)

• A. Telnet
• B. SSH
• C. HTTPS
• D. SNMP

An administrator wants to keep local CA cryptographic keys stored in a central location. Which FortiAuthenticator feature would provide this functionality?

• A. SCEP support
• B. REST API
• C. Network HSM
• D. SFTP server