Firewall Authentication

Question 1

What are three methods of firewall authentication?

Answer 1

• Local password
• Server-based password
• Two-factor

Question 2

Where are local accounts stored?

Answer 2

Locally on FortiGate

Question 3

What is a way to configure server-based password authentication?

Answer 3

• Create a user account locally, specify authentication server
• Add the authentication server to a user group

Question 4

Where can you configure POP3?

Answer 4

CLI

Question 5

What is the benefit of creating user accounts on FortiGate for server-based authentication?

Answer 5

Can configure MFA

Question 6

What is LDAP?

Answer 6

An application protocol for accessing and maintaining distributed directory information services

Question 7

What is RADIUS?

Answer 7

A standard protocol that provides AAA services

Question 8

What must be done on the RADIUS server to allow functionality with FortiGate?

Answer 8

FortiGate must be listed as a client on the RADIUS server

Question 9

What are some methods of OTP delivery?

Answer 9

• FortiToken
• Email/SMS
• FortiToken mobile push

Question 10

What needs to sync for FortiToken to work?

Answer 10

• Time
• Seed

Question 11

How many soft token activates do you get for each FortiGate before you have to purchase more?

Answer 11

2

Question 12

What are some ways to alter active authentication behavior?

Answer 12

• Enable authentication on every policy that could match the traffic
• Enable a captive portal on the ingress interface for traffic
• Enforce authentication on demand (CLI)

Question 13

What happens with authentication if there is a fall-through policy in place?

Answer 13

Unauthenticated users are not prompted for authentication

Question 14

What are the types of authentication timeout?

Answer 14

• Idle
• Hard
• New

Question 15

What is the default authentication timeout behavior?

Answer 15

• Idle
• 5 minutes

Question 15

What is hard authentication timeout?

Answer 15

Authentication expires after that amount of time, regardless of activity

Question 16

Where do you monitor users authenticating through the firewall?

Answer 16

Dashboard > Assets & Identities > Firewall Users

Question 17

A remote LDAP user is trying to authenticate with a username and password. How does FortiGate verify the login credentials?

Answer 17

FortiGate sends the user-entered credentials to the remote server for verification

Question 18

How are RADIUS group memberships configured?

Answer 18

With vendor-specific attributes (VSAs)