FCP_FAC_AD-6.5

FCP_FAC_AD-6.5 practice questions, page 2 of 2, with answer review and explanations.

Question 6

Which two data items are not synchronized in an active-active HA deployment? (Choose two.)

  1. Group mappings
  2. User certificates
  3. FSSO events
  4. Seeds

Question 7

Refer to the exhibit. Which functionality does the Enable NTLM option provide?

  1. It allows FortiAuthenticator to message end users using the FortiClient for SSO.
  2. It forces FortiClient users to use two-factor authentication when using FortiClient for SSO.
  3. It prevents users from authenticating to an unauthorized AD server.
  4. It enables tracking and recording all authentications performed through FortiClient.

Question 8

You are a FortiAuthenticator administrator for a large organization. Users who are configured to use FortiToken 200 for two-factor authentication can no longer authenticate. You have verified that only the users with two-factor authentication are experiencing the issue. What can cause this issue?

  1. Time drift between FortiAuthenticator and hardware tokens
  2. The seed value on the tokens was incorrectly updated
  3. Token certificate was added to a CRL
  4. FortiAuthenticator has lost contact with the FortiCloud token provisioning servers

Question 9

A network administrator is using FortiAuthenticator as their RADIUS server for wired and wireless network access. The administrator wants to pass the users' group information back to the RADIUS clients when the users authenticate. How does FortiAuthenticator accomplish this?

  1. RADIUS attributes
  2. RADIUS accounting
  3. Syslog messages
  4. REST API

Question 10

Refer to the exhibits. Event Log - Event Detail - An administrator has configured several wireless APs to use FortiAuthenticator as their RADIUS server. One user is unable to successfully authenticate. The user record exists in the system, but the FortiAuthenticator log shows Authentication failed, user not found. What is the most likely cause of the problem?

  1. The RADIUS traffic is being sourced from an IP address not listed as NAS.
  2. No client entry exists for the authenticating AP.
  3. The RADIUS secret is incorrect.
  4. RADIUS authentication is not enabled for the user.