FortiClient SSO Mobility Agents Quiz

What method can be used to achieve Single Sign-On (SSO) in the described system?

LDAP FSSO
TACACS+ FSSO
RADIUS FSSO
Kerberos FSSO (correct)

Which authentication method is suitable for Wi-Fi/Hotspot access in the described system?

Biometric authentication
Certificate-based authentication
MAC address authentication
Social authentication (correct)

In the context of access control in Operational Technology (O.T.), where can authentication be implemented according to the Purdue model?

Control area zones only
Enterprise zone only
Control area zones and operations & control zone (correct)
Operations & control zone only

What is used for rule-based auto-sync with Windows Active Directory?

Active Directory Integration (D) Signup and view all the answers

Which method can be used for restricting the number of devices per FSSO user?

FSSO user/group/IP filtering (C) Signup and view all the answers

What is used for Guest/BYOD authentication in the described system?

Certificate authority (A) Signup and view all the answers

Where can local authentication be used in the described system?

Smaller plant networks (D) Signup and view all the answers

What is the main question when designing access control in Operational Technology (O.T.)?

Where to implement access control and which method (C) Signup and view all the answers

Where can authentication be used in the enterprise zone according to the text?

I.T. and O.T. (A) Signup and view all the answers

What is the purpose of the REST API in the described system?

Integration with third-party systems (A) Signup and view all the answers

What is the role of the Firewall Authentication in O.T.?

Implement access control within a plant (A) Signup and view all the answers

What is used for securing the authentication server under the operations & control zone?

Edge firewall (B) Signup and view all the answers

What does the FortiClient SSO Mobility Agent do?

Identifies Windows Domain users and sends information including identity and IP-address to FortiAuthenticator (B) Signup and view all the answers

What does the FortiClient SSO Mobility Agent do to detect any unclean disconnection?

Sends hello packets every five minutes (A) Signup and view all the answers

What happens when the user logs out or shuts down with the FortiClient SSO Mobility Agent installed?

The user is also logged out of FortiAuthenticator (D) Signup and view all the answers

What is a key difference between FortiAuthenticator and FortiGate in terms of RADIUS?

Rule-based rewrite of RADIUS accounting packets for FSSO (D) Signup and view all the answers

What is a function of FortiAuthenticator related to scale and centralization?

Supports scale and centralization (100 to 1 million users) (D) Signup and view all the answers

What does the FortiClient SSO Mobility Agent monitor for changes?

IP-address changes (D) Signup and view all the answers

What is the purpose of the heartbeat system implemented by the FortiClient SSO Mobility Agent?

To de-authenticate the user following a configurable number of heartbeat failures (B) Signup and view all the answers

What is the main purpose of the FortiClient SSO Mobility Agent?

To collect user information and IP-addresses (B) Signup and view all the answers

What does the FortiClient SSO Mobility Agent do in cases of unclean disconnection?

Implements a heartbeat system (A) Signup and view all the answers

What is the most scalable FSSO ID method?

FortiClient SSO Mobility Agent (A) Signup and view all the answers

What does FortiAuthenticator support in terms of multiple FortiGate devices per token?

Supports multiple FortiGate devices per token (A) Signup and view all the answers