QUESTION: 5

Which option correctly describes an SP-initiated SSO SAML packet flow for a host without a SAML assertion?

Service provider contacts identity provider, identity provider validates principal for service provider, service provider establishes communication with principal
Principal contacts identity provider and is redirected to service provider, principal establishes connection with service provider, service provider validates authentication with identify provider
Principal contacts service provider, service provider redirects principal to identity provider, after successful authentication identify provider redirects principal to service provider
Principal contacts identity provider and authenticates, identity provider relays principal to service provider after valid authentication

Answer(s): C

A device or user identity cannot be established transparently, such as with non-domain BYOD devices, and allow users to create their own credentialism. In this case, which user identity discovery method can Fortiauthenticator use?

Syslog messaging or SAML IDP
Kerberos-base authentication
Radius accounting
Portal authentication

Answer(s): D

Reveal Solution Next Question

QUESTION: 7

Which two SAML roles can Fortiauthenticator be configured as? (Choose two)

Identity provider
Principal
Assertion server
Service provider

Answer(s): A,D

Reveal Solution Next Question

QUESTION: 8

What happens when a certificate is revoked? (Choose two)

Revoked certificates cannot be reinstated for any reason
All certificates signed by a revoked CA certificate are automatically revoked
Revoked certificates are automatically added to the CRL
External CAs will periodically query Fortiauthenticator and automatically download revoked certificates

Answer(s): C,D

Reveal Solution Next Question

Free NSE6_FAC-6.1 Exam Braindumps (page: 3)

QUESTION: 5

QUESTION: 6

QUESTION: 7

QUESTION: 8

NSE6_FAC-6.1 Discussions & Posts