Explain How to Deploy and Configure Fortinet Single Sign-On (FSSO) NSE4-FORTIOS-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company uses FSSO with DC agent mode to enforce user-based policies. They have a FortiGate with multiple interfaces: one connected to the internal network and one to the internet. They want to apply FSSO to traffic coming from the internal network. Which configuration is required on the FortiGate to enable FSSO for this traffic?

   • AEnable FSSO on the internal interface and create firewall policies with FSSO groups as source.
   • BSet the internal interface as the FSSO server and specify the DC agent's IP.
   • CCreate a firewall policy that allows all traffic from the internal network to the internet.
   • DConfigure the FortiGate as an LDAP client to authenticate users directly.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   During collector agent configuration, how are DC agents typically managed?

   • ABy installing the collector agent on each domain controller
   • BBy using Active Directory to automatically discover DC agents
   • CBy configuring the FortiGate to directly poll each DC agent
   • DBy adding each DC agent's IP address to the collector agent's configuration
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A network administrator is deploying FSSO with collector agent mode in a multi-domain forest. They have installed DC agents on all domain controllers and a collector agent on a Windows server. The FortiGate is configured to use the collector agent as an FSSO server. Which statement accurately describes the role of the collector agent in this deployment?

   • AIt replicates Active Directory user and group information to the FortiGate for policy enforcement.
   • BIt monitors the security event logs on all domain controllers and sends login events directly to the FortiGate.
   • CIt aggregates login information from multiple DC agents and communicates with the FortiGate on behalf of the DC agents.
   • DIt authenticates users against Active Directory and creates firewall sessions.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   In an Active Directory environment, how does FSSO benefit guest access?

   • AIt provides a captive portal for guests to register their devices
   • BIt allows guests to be placed in a separate firewall policy based on their login status
   • CIt blocks all guest access by default
   • DIt automatically authenticates guests using their domain credentials
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   When configuring FortiGate to use FSSO, what is a required configuration on the FortiGate?

   • AAdding an LDAP server for user and group lookup
   • BEnabling FSSO on the WAN interface
   • CSetting up a VPN tunnel to the domain controller
   • DConfiguring a RADIUS server for authentication
   Reveal Solution Discussion Select an answer first