Fortinet FCP_FAC_AD-6.5 問題集

質問 1：
A system administrator wants to integrate FortiAuthenticator with an existing identity management system with the goal of authenticating and deauthenticating users into FSSO.
A. The ability to import and export users from CSV files
B. REST API
C. RADIUS learning mode for migrating users
D. SNMP monitoring and traps
正解：B

質問 2：
How can a SAML metada file be used?
A. To correlate the IDP address to its hostname
B. To resolve the IDP realm for authentication
C. To import the required IDP configuration
D. To defined a list of trusted user names
正解：C

質問 3：
What is the benefit of integrating FortiAuthenticator with Active Directory for single sign-on?
A. It allows users to authenticate using only their email addresses
B. It requires users to use different credentials for different resources
C. It prevents any user logon events from being recorded
D. It centralizes user management and reduces password fatigue
正解：D

質問 4：
You have implemented two-factor authentication to enhance security to sensitive enterprise systems.
How could you bypass the need for two-factor authentication for users accessing form specific secured networks?
A. Enable Adaptive Authentication in the portal policy.
B. Enable the Resolve user geolocation from their IP address option in the authentication policy.
C. Specify the appropriate RADIUS clients in the authentication policy.
D. Create an admin realm in the authentication policy.
正解：A

質問 5：
In a PKI infrastructure, what is the purpose of the root certificate?
A. It is a backup certificate for emergency situations
B. It is the highest-level certificate that signs other certificates
C. It is the certificate of the end user in a communication
D. It is used for encrypting sensitive user data
正解：B

質問 6：
Which option correctly describes an SP-initiated SSO SAML packet flow for a host without a SAML assertion?
A. Principal contacts service provider, service provider redirects principal to identity provider, after successful authentication identity provider redirects principal to service provider.
B. Service provider contacts identity provider, identity provider validates principal for service provider, service provider establishes communication with principal.
C. Principal contacts identity provider and authenticates, identity provider relays principal to service provider after valid authentication.
D. Principal contacts identity provider and is redirected to service provider, principal establishes connection with service provider, service provider validates authentication with identity provider.
正解：A

質問 7：
Which of the following authentication methods is NOT typically used for single sign-on (SSO)?
A. Biometric authentication
B. Captcha authentication
C. Username and password
D. Smart card authentication
正解：B

質問 8：
Which statement about the assignment of permissions for sponsor and administrator accounts is true?
A. Only administrator accounts permissions are assigned using admin profiles.
B. Sponsor permissions are assigned using group settings.
C. Administrator capabilities are assigned by applying permission sets to admin groups.
D. Both sponsor and administrator account permissions are assigned using admin profiles.
正解：D