NSE 6 – FortiAuthenticator 6.4 — Question 11

Which two statements about the RADIUS service on FortiAuthenticator are true? (Choose two.)

Answer options

• A. FortiAuthenticator answers only to RADIUS clients that are registered with FortiAuthenticator.
• B. RADIUS users can be migrated to LDAP users.
• C. Only Local users can be authenticated through RADIUS.
• D. Two-factor authentication cannot be enforced when using RADIUS authentication.

Correct answer: A, D

Explanation

Option A is correct because FortiAuthenticator is designed to respond only to registered RADIUS clients, ensuring security. Option D is also correct as it indicates the limitation of RADIUS in enforcing two-factor authentication. Options B and C are incorrect because RADIUS users can exist independently of LDAP users and various types of users, not just Local users, can be authenticated through RADIUS.