View all questions & answers for the NSE 6 - FortiClient EMS 7.4 Administrator Exam Materials exam
NSE 6 - FortiClient EMS 7.4 Administrator Exam Materials - Question #48 Discussion
Community Explanations & Comments (4)
Anonymous99
1 year ago
Selected: A, D
A & D is correct
mahmoud mostafa
10 months ago
LDAPS is the same as ldap but over ssl on port 636 dose not support chalenging or prompoting the user for 2fa
ldap &tacacs may support that in some how
but radius and saml fully supports this
mahmoud mostafa
10 months ago
Selected: B, D
Radius & SAML are the two protocols support 2FA
while in radius the Radius server asks the authenticating user for radius attribute(OTP) to be authenticated.
and in SAML
the authentication is on FAC itself while the user was directed from SAML SP to idp (FortiAuthenticator)
Ldap dose not support that
I do not know about TACACS but it dose not.
while in radius the Radius server asks the authenticating user for radius attribute(OTP) to be authenticated.
and in SAML
the authentication is on FAC itself while the user was directed from SAML SP to idp (FortiAuthenticator)
Ldap dose not support that
I do not know about TACACS but it dose not.
Xavier E. Diaz
10 months ago
Why B & C may be INCORRECT: B. RADIUS: While FortiGate uses RADIUS heavily, FortiClient EMS primarily uses LDAPS for its directory integration and SAML for SSO/MFA for administrators. RADIUS is typically used for network access control, not the primary administrative and user authentication integration within EMS.
C. TACACS: TACACS+ is primarily used for device administration (like connecting to a router or switch) and is not the standard protocol for integrating EMS with identity management or MFA solutions. I hth
FME
7 months ago
Selected: A, D
Integrating FortiClient EMS with identity infrastructure (Active Directory, LDAP, Entra ID/Azure AD) enables user-based authentication for Zero Trust Network Access (ZTNA) and VPN. Key steps include configuring LDAP/SAML, syncing user groups, setting up FortiAuthenticator for 2FA, and requiring user authentication during FortiClient registration/onboarding to EMS
HX
4 months ago
Selected: B, D
MFA/2FA only possible with SAML and RADIUS
A company must integrate the FortiClient EMS with their existing identity management infrastructure for user authentication, and implement and enforce administrative access with multi-factor authentication (MFA). Which two authentication methods can they use in this scenario? (Choose two answers)
Brave-Dump Community Votes