QUESTION 19
A system administrator wants to integrate FortiAuthenticator with an existing identity management system with the goal of authenticating and deauthenticating users into FSSO.
What feature does FortiAuthenticator offer for this type of integration?

QUESTION 20
You want to monitor FortiAuthenticator system information and receive FortiAuthenticator traps through SNMP.
Which two configurations must be performed after enabling SNMP access on the FortiAuthenticator interface? (Choose two)

QUESTION 21
You are a Wi-Fi provider and host multiple domains.
How do you delegate user accounts, user groups and permissions per domain when they are authenticating on a single FortiAuthenticator device?

QUESTION 22
An administrator is integrating FortiAuthenticator with an existing RADIUS server with the intent of eventually replacing the RADIUS server with FortiAuthenticator.
How can FortiAuthenticator help facilitate this process?

QUESTION 23
Which option correctly describes an SP-initiated SSO SAML packet flow for a host without a SAML assertion?

QUESTION 24
What are three key features of FortiAuthenticator? (Choose three)

QUESTION 25
A digital certificate, also known as an X.509 certificate, contains which two pieces of information? (Choose two.)

QUESTION 26
At a minimum, which two configurations are required to enable guest portal services on FortiAuthenticator? (Choose two)

QUESTION 27
You are the administrator of a global enterprise with three FortiAuthenticator devices. You would like to deploy them to provide active-passive HA at headquarters, with geographically distributed load balancing.
What would the role settings be?

QUESTION 28
Which two statements about the self-service portal are true? (Choose two)

QUESTION 29
When configuring syslog SSO, which three actions must you take, in addition to enabling the syslog SSO method? (Choose three.)

QUESTION 30
You have implemented two-factor authentication to enhance security to sensitive enterprise systems.
How could you bypass the need for two-factor authentication for users accessing form specific secured networks?

QUESTION 31
You are an administrator for a large enterprise and you want to delegate the creation and management of guest users to a group of sponsors.
How would you associate the guest accounts with individual sponsors?

QUESTION 32
Which two SAML roles can Fortiauthenticator be configured as? (Choose two)

QUESTION 33
Which two statement about the RADIUS service on FortiAuthenticator are true? (Choose two)

QUESTION 34
Which of the following is an OATH-based standard to generate event-based, one-time password tokens?

QUESTION 35
When generating a TOTP for two-factor authentication, what two pieces of information are used by the algorithm to generate the TOTP?

QUESTION 36
Which EAP method is known as the outer authentication method?

QUESTION 37
Which two protocols are the default management access protocols for administrative access for FortiAuthenticator? (Choose two)