Configure Different Methods of Firewall Authentication NSE4-FORTIOS-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   For an internal corporate network where employees are already logged into the Windows domain, which authentication method provides the most seamless user experience while enforcing access control?

   • AGuest voucher authentication
   • BFTP authentication
   • CHTTP form-based authentication
   • DFSSO (Fortinet Single Sign-On)
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   An administrator has configured FSSO for the company's employees. A user reports that they cannot access the internet, and the administrator suspects the user is not being authenticated correctly. Where in the FortiGate GUI can the administrator check the user's authentication status and active sessions?

   • AMonitor > Firewall User Monitor
   • BSystem > Admin
   • CPolicy & Objects > Firewall Policy
   • DLog & Report > Forward Traffic
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   In the FortiGate LDAP server configuration, what is the purpose of the bind credentials (bind DN and password)?

   • ATo authenticate end users when they attempt to access the network
   • BTo allow the FortiGate to query the directory and perform user lookups
   • CTo define which users are allowed to authenticate through the firewall
   • DTo encrypt the communication between the FortiGate and the LDAP server
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company wants to provide both HTTP and HTTPS access to a web server for external users. They want to authenticate users with a web-based login page. The administrator has configured HTTP/HTTPS form-based authentication. However, users are not being prompted for credentials when accessing the web server. What is the most likely cause?

   • AThe firewall policy is not set to require authentication.
   • BThe web server is not configured to redirect to the FortiGate.
   • CThe users are already authenticated via FSSO.
   • DThe LDAP server is not reachable.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company uses an on-premises OpenLDAP server for employee credentials. They want to authenticate users attempting to access the internet through the FortiGate. The LDAP server is at 10.10.10.50, uses the default LDAP port, and requires the FortiGate to bind with a service account. The administrator has already created a user group in the FortiGate. What must be configured to enable LDAP authentication for firewall policies?

   • AConfigure the LDAP server object with the IP 10.10.10.50, port 636, and bind credentials, then reference it in a user group.
   • BCreate a RADIUS server object with the IP 10.10.10.50, port 1812, and a shared secret, then reference it in a user group.
   • CCreate a local user for each employee and add them to a user group.
   • DCreate an LDAP server object with the IP 10.10.10.50, port 389, and bind credentials, then reference it in a user group.
   Reveal Solution Discussion Select an answer first