Logo ExamsQA
Exit
Official Bank 0/47

Fortinet NSE 6 – FortiWeb 6.4 (NSE6_FAC-6.4) - Fortinet Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
47 Total Questions
1
Question
When you are setting up two FortiAuthenticator devices in active-passive HA, which HA role must you select on the master FortiAuthenticator?
Options
A Load balancing master
B Cluster member
C Standalone master
D Active-passive master
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
What happens when a certificate is revoked? (Choose two)
Select 2
Options
A External CAs will priodically query Fortiauthenticator and automatically download revoked certificates
B Revoked certificates are automatically added to the CRL
C Revoked certificates cannot be reinstated for any reason
D All certificates signed by a revoked CA certificate are automatically revoked
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
An administrator has an active directory (AD) server integrated with FortiAuthenticator. They want members of only specific AD groups to participate in FSSO with their corporate FortiGate firewalls.

How does the administrator accomplish this goal?
Options
A Configure a FortiGate filter on FortiAuthenticatoc
B Configure fine-grained controls on FortiAuthenticator to designate AD groups.
C Configure SSO groups and assign them to FortiGate groups.
D Configure a domain groupings list to identify the desired AD groups.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
Which network configuration is required when deploying FortiAuthenticator for portal services?
Options
A Policies must have specific ports open between FortiAuthenticator and the authentication clients
B Fortigate must be setup as default gateway for FortiAuthenticator
C One of the DNS servers must be a FortiGuard DNS server
D FortiAuthenticator must have the REST API access enable on port1
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
Examine the screenshot shown in the exhibit.

Exhibit

Which two statements regarding the configuration are true? (Choose two.)
Select 2
Options
A All accounts registered through the guest portal must be validated through email
B Guest users must fill in all the fields on the registration form
C All guest accounts created using the account registration feature will be placed under the Guest_Portal_Users group
D Guest user account will expire after eight hours
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.