Fortinet Exam NSE6_FAC-6.4 Topic 7 Question 30 Discussion

Actual exam question for Fortinet's NSE6_FAC-6.4 exam

Question #: 30
Topic #: 7

What capability does the inbound proxy setting provide?

AIt allows FortiAuthenticator to determine the origin source IP address after traffic passes through a proxy for system access,

BIt allows FortiAuthenticator to act as a proxy for remote authentication servers.

CIt allows FortiAuthenticator the ability to round robin load balance remote authentication servers.

DIt allows FortiAuthenticator system access to authenticating users, based on a geo IP address designation.

Show Suggested Answer

Suggested Answer: A

Online activation of the tokens through the FortiGuard network is the most secure way of delivering FortiToken data once the token has been seeded because it eliminates the risk of seed files being compromised during transit or storage. The other methods involve physical or manual delivery of seed files which can be intercepted, lost, or stolen. Reference: https://docs.fortinet.com/document/fortiauthenticator/6.4/administration-guide/372403/fortitoken

by Annice at Aug 24, 2024, 05:26 AM

Limited Time Offer

25%

Off

Get Premium NSE6_FAC-6.4 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lamonica

27 days ago

I'm leaning towards B. Letting FortiAuthenticator act as a proxy for remote authentication servers sounds like it could simplify the authentication process. Although, maybe that's just wishful thinking on my part.

upvoted 0 times

...

Adelaide

28 days ago

Option A is the way to go. Determining the real source IP after proxy traffic is crucial for security. As they say, 'Proxy me once, shame on you. Proxy me twice, shame on me.'

upvoted 0 times

...

Genevieve

1 months ago

I'd go with D. Allowing FortiAuthenticator to authenticate users based on geo IP address seems like a handy security feature. It's the only option that mentions anything about user authentication.

upvoted 0 times

...

Lanie

1 months ago

Hmm, I'm not sure about this one. Option C sounds interesting, but I don't think that's the right answer. Maybe I need to do some more research on FortiAuthenticator.

upvoted 0 times

Cory

4 days ago

B) It allows FortiAuthenticator to act as a proxy for remote authentication servers.

upvoted 0 times

...

Giuseppe

5 days ago

A) It allows FortiAuthenticator to determine the origin source IP address after traffic passes through a proxy for system access.

upvoted 0 times

...

Lashaun

1 months ago

I'm going with option B. It allows FortiAuthenticator to act as a proxy for remote authentication servers, which seems like a useful capability.

upvoted 0 times

...

3 months ago

I think the inbound proxy setting allows FortiAuthenticator to determine the origin source IP address after traffic passes through a proxy for system access.

upvoted 0 times

...