Fortinet NSE 6 - FortiWeb 6.4 (NSE6_FAC) - Fortinet Actual Exam Questions
Last updated on April 25, 2026
An administrator has an active directory (AD) server integrated with FortiAuthenticator. They want members of only specific AD groups to participate in FSSO with their corporate FortiGate firewalls. How does the administrator accomplish this goal?
Configure a FortiGate filter on FortiAuthenticatoc
Configure a domain groupings list to identify the desired AD groups.
Configure fine-grained controls on FortiAuthenticator to designate AD groups.
Configure SSO groups and assign them to FortiGate groups.
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Which interface services must be enabled for the SCEP client to connect to Authenticator?
OCSP
REST API
SSH
HTTP/HTTPS
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Which three of the following can be used as SSO sources? (Choose three)
FortiClient SSO Mobility Agent
SSH Sessions
FortiAuthenticator in SAML SP role
Fortigate
RADIUS accounting
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
You are the administrator of a global enterprise with three FortiAuthenticator devices. You would like to deploy them to provide active-passive HA at headquarters, with geographically distributed load balancing. What would the role settings be?
One standalone and two load balancers B One standalone primary, one cluster member, and one load balancer
Two cluster members and one backup
Two cluster members and one load balancer
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
A device or user identity cannot be established transparently, such as with non-domain BYOD devices, and allow users to create their own credentialis. In this case, which user idendity discovery method can Fortiauthenticator use?
Syslog messaging or SAML IDP
Kerberos-base authentication
Radius accounting
Portal authentication
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Finish Practice?
Are you sure you want to finish? This will end your practice session.