Fortinet FCP_FAC_AD-6.5 問題集

質問 1：
Which of the following is a benefit of using role-based access control (RBAC) in FortiAuthenticator?
A. It eliminates the need for authentication
B. It assigns the same permissions to all users
C. It provides granular control over user access based on their roles
D. It automatically generates strong passwords for users
正解：C

質問 2：
Which two SAML roles can Fortiauthenticator be configured as? (Choose two)
A. Principal
B. Service provider
C. Assertion server
D. Idendity provider
正解：B,D

質問 3：
What is an advantage of using automatic certificate management services?
A. They are only applicable for internal certificates, not external ones
B. They require manual intervention for every certificate renewal
C. They reduce the risk of expired certificates and ensure smoother operations
D. They provide less secure certificates compared to manual management
正解：C

質問 4：
You are the administrator of a large network and you want to track your users by leveraging the FortiClient SSO Mobility Agent. As part of the deployment you want to make sure that a bad actor will not be allowed to authenticate with an unauthorized AD server and appear as a legitimate user when reported by the agent.
Which option can prevent such an attack?
A. Add only the trusted AD servers to a valid servers group.
B. Enable the Enable RADIUS accounting SSO clients method.
C. Change the Secret key in the Enable authentication option for the FortiClient Mobility Agent Service.
D. Enable the Enable NTLM option in the FortiClient Mobility Agent Service.
正解：D

質問 5：
Which three of the following can be used as SSO sources? (Choose three.)
A. RADIUS accounting
B. FortiClient SSO Mobility Agent
C. SSH sessions
D. FortiAuthenticator in SAML SP role
E. FortiGate
正解：A,B,E
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Which two statements about asymmetric cryptography are true? (Choose two.)
A. It distributes key pairs to both the client and the server
B. Private keys are distributed in the server's digital certificates
C. It uses a mathematically linked public and private key pair
D. The public key can be openly distributed
正解：C,D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
What is the purpose of implementing SAML roles on FortiAuthenticator for the SAML SSO service?
A. To automatically generate SAML certificates
B. To assign specific access levels based on user roles
C. To prevent users from accessing any resources
D. To limit the number of SAML SSO sessions
正解：B

質問 8：
Which two statements about the self-service portal are true? (Choose two)
A. Realms can be used to configure which seld-registered users or groups can authenticate on the network
B. Administrator approval is required for all self-registration
C. Authenticating users must specify domain name along with username
D. Self-registration information can be sent to the user through email or SMS
正解：A,D