NSE6

NSE6 practice questions, page 2 of 3, with answer review and explanations.

Question 6

A device that is 802.1X non-compliant must be connected to the network. Which authentication method can you use to authenticate the device with FortiAuthenticator?

  1. EAP-TTLS
  2. EAP-TLS
  3. PEAP (MSCHAPv2)
  4. MAC authentication bypass

Question 7

Which statements are true for the EAP-TTLS authentication method? (Choose two.)

  1. Uses mutual authentication
  2. Validates only the server (FortiAuthenticator) identity
  3. Requires an EAP server certificate
  4. Supports a port access control (wired) solution only

Question 8

Which statements are true about the FortiAuthenticator CLI? (Choose two.)

  1. The CLI is used for initial configuration, factory resets, and debugging only
  2. The CLI is accessible through the dashboard of the Web-based manager
  3. The CLI is accessible through a terminal emulation application using the SSH protocol
  4. The CLI is used to configure DNS server addresses

Question 9

RADIUS authentication with FortiAuthenticator is not working. The traffic sniffer indicates that client traffic is not reaching FortiAuthenticator. Which could be the cause of the problem? (Choose two.)

  1. Incorrect RADIUS client IP and pre-shared secret
  2. Group filters on the RADIUS client
  3. Authentication method on the RADIUS client
  4. Firewall policies on FortiGate

Question 10

Which statements are true about the RADIUS service on FortiAuthenticator? (Choose two.)

  1. FortiAuthenticator only answers to RADIUS clients that are registered with FortiAuthenticator
  2. Local users can be authenticated through RADIUS
  3. Administrator users can be authenticated through RADIUS
  4. RADIUS clients must accept the RADIUS challenge response method if using two-factor authentication