NSE6_FAC-6.1

Review 30 NSE6-FAC-6-1 practice questions with answer explanations and community insights.

Question 1

A device or user identity cannot be established transparently, such as with non-domain BYOD devices, and allow users to create their own credentials. In this case, which user identity discovery method can FortiAuthenticator use?

  1. RADIUS accounting
  2. Kerberos-based authentication
  3. Portal authentication
  4. Syslog messaging or SAMI IdP

Question 2

What are three key features of FortiAuthenticator? (Choose three.)

  1. RSSO server
  2. Log server
  3. Portal services
  4. Certificate authority
  5. Identity management device

Question 3

Which two capabilities does FortiAuthenticator offer when acting as a self-signed or local CA? (Choose two.)

  1. Merging local and remote CRLs using SCEP
  2. Creating, signing, and revoking of X.509 certificates
  3. Validating other CA CRLs using OCSP
  4. Importing other CA certificates and CRLs

Question 4

Which two are supported captive or guest portal authentication methods? (Choose two.)

  1. LinkedIn
  2. Email
  3. Apple ID
  4. Instagram

Question 5

What happens when a certificate is revoked? (Choose two.)

  1. External CAs will periodically query FortiAuthenticator and automatically download revoked certificates
  2. Revoked certificates are automatically added to the CRL
  3. All certificates signed by a revoked CA certificate are automatically revoked
  4. Revoked certificates cannot be reinstated for any reason