[2025年09月]更新のFortinet FCP_FAC_AD-6.5試験基本問題には解答が付きます [Q20-Q44]

[2025年09月]更新のFortinet FCP_FAC_AD-6.5試験基本問題には解答が付きます

2025年最新の実際に出るFortinet FCP_FAC_AD-6.5試験問題集と解答

質問 # 20
Which two capabilities does FortiAuthenticator offer when acting as a self-signed or local CA? (Choose two.)

A. Validating other CA CRLs using OCSP
B. Creating, signing, and revoking of X.509 certificates
C. Importing other CA certificates and CRLs
D. Merging local and remote CRLs using SCEP

正解：B、C

解説：
FortiAuthenticator can import other CA certificates and CRLs for trust and validation purposes.
It can create, sign, and revoke X.509 certificates when acting as a self-signed or local CA.

質問 # 21
You are a Wi-Fi provider and host multiple domains.
How do you delegate user accounts, user groups and permissions per domain when they are authenticating on a single FortiAuthenticator device?

A. Create user groups.
B. Create multiple directory trees on FortiAuthenticator.
C. Create realms.
D. Automatically import hosts from each domain as they authenticate.

正解：C

質問 # 22
How can tags be used to generate Fortinet Single Sign-On (FSSO) events?

A. By creating custom login screens
B. By attaching physical tags to users' devices
C. By sending notifications to users about authentication events
D. By automatically categorizing logon events using predefined labels

正解：D

質問 # 23
How can a SAML metada file be used?

A. To resolve the IDP realm for authentication
B. To correlate the IDP address to its hostname
C. To defined a list of trusted user names
D. To import the required IDP configuration

正解：D

質問 # 24
What is the primary purpose of FortiAuthenticator portal services?

A. To manage network firewalls
B. To authenticate and provide access to local and remote users
C. To host gaming servers for multiplayer online games
D. To create custom web portals for online shopping

正解：B

質問 # 25
You have implemented two-factor authentication to enhance security to sensitive enterprise systems.
How could you bypass the need for two-factor authentication for users accessing form specific secured networks?

A. Create an admin realm in the authentication policy.
B. Specify the appropriate RADIUS clients in the authentication policy.
C. Enable the Resolve user geolocation from their IP address option in the authentication policy
D. Enable Adaptive Authentication in the portal policy.

正解：D

解説：
Enabling Adaptive Authentication in the portal policy allows FortiAuthenticator to apply contextual rules, such as bypassing two-factor authentication when users connect from specific secured networks.

質問 # 26
How does FortiAuthenticator integrate with Active Directory (AD) to detect logon events?

A. By syncing user passwords between FortiAuthenticator and AD
B. By creating duplicate user accounts in FortiAuthenticator
C. By analyzing AD logs to track user logon activities
D. By requiring users to log in twice for enhanced security

正解：C

質問 # 27
What is the function of RADIUS profiles and realms in authentication?

A. They authenticate users based on their IP addresses
B. They enable remote access to user files
C. They provide secure encryption for user data
D. They manage authentication settings and methods for RADIUS users

正解：D

質問 # 28
Which FortiAuthenticator feature allows users to authenticate against different back-end databases when using a single RADIUS policy?

A. LDAP services
B. User Groups
C. Realms
D. RADIUS attributes

正解：C

解説：
Realms in FortiAuthenticator allow mapping of authentication requests to different back-end databases within a single RADIUS policy, enabling user authentication across multiple directories or identity sources.

質問 # 29
What is an advantage of using automatic certificate management services?

A. They require manual intervention for every certificate renewal
B. They are only applicable for internal certificates, not external ones
C. They reduce the risk of expired certificates and ensure smoother operations
D. They provide less secure certificates compared to manual management

正解：C

質問 # 30
What is the primary purpose of a digital certificate in PKI?

A. To verify the identity of the certificate holder and enable secure communication
B. To provide access to encrypted websites only
C. To encrypt all network traffic in a network environment
D. To store personal information of the certificate holder

正解：A

質問 # 31
At a minimum, which two configurations are required to enable captive portal services on FortiAuthenticator?
(Choose two.)

A. Configuring an external authentication portal
B. Configuring a portal policy
C. Configuring a RADIUS client
D. Configuring at least one pre-login service

正解：B、D

解説：
A pre-login service must be configured to define how users can access the portal before authentication.
A portal policy is required to determine authentication rules and behavior for captive portal access.

質問 # 32
Refer to the exhibit.

Examine the RADIUS policy configuration shown in the exhibit. A user attempts to authenticate by entering the [email protected] their password.
Which realm will the user be authenticated against?

A. Local
B. Corporate
C. Corp-2, but only if the user has a local account
D. Local, but only if the account is a member of the FWAdmins group

正解：B

解説：
Since the username includes the realm @example.com but does not match any configured realm exactly, and the option Use default realm when user-provided realm is different from all configured realms is enabled, the default realm is used - in this case, corporate.

質問 # 33
What can third-party logon events be used for in Fortinet Single Sign-On (FSSO)?

A. Generating weather forecasts
B. Tracking user logon events from other systems
C. Automatically updating software
D. Creating virtual networks

正解：B

質問 # 34
Examine the screenshot shown in the exhibit.
Which two statements regarding the configuration are true? (Choose two.)

A. All guest accounts created using the account registration feature will be placed under the Guest_Portal_Users group.
B. All accounts registered through the guest portal must be validated through email.
C. Guest user account will expire after eight hours.
D. Guest users must fill in all the fields on the registration form.

正解：A、B

質問 # 35
What is the role of the FortiAuthenticator certificate management service?

A. Handling firewall configurations
B. Generating local certificates for various purposes
C. Managing network load balancing
D. Managing user passwords

正解：B

質問 # 36
What is the primary purpose of FortiAuthenticator in a network environment?

A. Load Balancing
B. Authentication and Identity Management
C. Intrusion Detection
D. Packet Filtering

正解：B

質問 # 37
In FortiAuthenticator, what is the purpose of a captive portal?

A. To manage hardware resources in the network
B. To encrypt all network traffic for security
C. To capture and authenticate user credentials before granting access to the network
D. To restrict user access to specific websites

正解：C

質問 # 38
When performing a remote LDAP server integration with FortiAuthenticator, how do server type templates assist with the integration?

A. They autopopulate the simple and regular bind settings.
B. They automatically set the LDAP user auto provisioning settings.
C. They populate the query element fields with defined attribute and class values.
D. They define the connection security and domain authentication settings for each LDAP server you integrate with.

正解：C

解説：
Server type templates in FortiAuthenticator assist LDAP integration by prepopulating the query element fields with the correct attribute and class values for the selected LDAP server type, simplifying configuration and ensuring accurate directory queries.

質問 # 39
What is the main purpose of active authentication in network security?

A. Monitoring network traffic
B. Enforcing access controls based on user identity
C. Detecting software vulnerabilities
D. Accelerating internet speeds

正解：B

質問 # 40
In a PKI infrastructure, what is the purpose of the root certificate?

A. It is used for encrypting sensitive user data
B. It is the certificate of the end user in a communication
C. It is the highest-level certificate that signs other certificates
D. It is a backup certificate for emergency situations

正解：C

質問 # 41
You are a network administrator with a large wireless environment. FortiAuthenticator acts as the RADIUS server for your wireless controllers. You want specific wireless controllers to authenticate users against specific realms.
How would you satisfy this requirement?