/
FortiAuthenticator Quick Reference
Save to my account
Sign up
FortiAuthenticator Quick Reference
FortiAuthenticator Quick Reference
Study
1
Question
What is the process of authentication in security systems?
Answer
The process of verifying a user’s or device’s identity before granting access to systems or resources.
2
Question
What does the 'something you know' authentication factor refer to?
Answer
Password or PIN.
3
Question
What is an example of the 'something you have' authentication factor?
Answer
Token, smart card, or FIDO key.
4
Question
What authentication factor is based on 'something you are'?
Answer
Biometrics.
5
Question
What is the 'somewhere you are' authentication factor?
Answer
Location-based authentication.
6
Question
What primary role does FortiAuthenticator provide in Fortinet environments?
Answer
Centralized authentication services, integrating multi-factor and certificate-based methods for Fortinet and third-party systems.
7
Question
What is FortiAuthenticator?
Answer
Fortinet’s identity management appliance that acts as the central identity engine in Fortinet Security Fabric.
8
Question
Name three services provided by FortiAuthenticator.
Answer
User authentication, multi-factor authentication, and Single Sign-On (FSSO, SAML, OAuth/OIDC).
9
Question
What additional services does FortiAuthenticator offer beyond authentication?
Answer
Certificate authority (CA) services, RADIUS/LDAP services, and identity management for 802.1X, VPN, Wi-Fi, and portals.
10
Question
What are the deployment form factors for FortiAuthenticator?
Answer
Hardware appliance, virtual machine (VMware, Hyper-V, KVM), or cloud deployment (some editions).
11
Question
What factors determine FortiAuthenticator sizing?
Answer
Number of users, authentication load, FSSO event volume, RADIUS throughput, and certificate issuance requirements.
12
Question
What high availability mode does FortiAuthenticator support?
Answer
Active-Passive mode.
13
Question
What are the key authentication services in FortiAuthenticator?
Answer
RADIUS and LDAP authentication.
14
Question
What user database options does FortiAuthenticator support?
Answer
Local and remote user databases.
15
Question
Name three two-factor methods supported by FortiAuthenticator.
Answer
FortiToken, email/SMS, FIDO2.
16
Question
What SSO protocols does FortiAuthenticator support?
Answer
FSSO, SAML, OAuth/OIDC.
17
Question
What self-service features does FortiAuthenticator provide?
Answer
Self-service portal.
18
Question
What PKI services are available in FortiAuthenticator?
Answer
Certificate authority (PKI).
19
Question
What portal services does FortiAuthenticator offer?
Answer
Captive portal services.
20
Question
What logging capabilities does FortiAuthenticator include?
Answer
Logging and monitoring.
21
Question
What centralized function does FortiAuthenticator perform for identity?
Answer
Centralized authentication.
22
Question
How does FortiAuthenticator collect identities?
Answer
Identity collection from AD/LDAP.
23
Question
What token types does FortiAuthenticator manage?
Answer
Hardware, mobile, FIDO2 tokens.
24
Question
What RADIUS functions does FortiAuthenticator provide?
Answer
RADIUS accounting and authorization.
25
Question
What customization options exist for portals in FortiAuthenticator?
Answer
Custom portal creation.
26
Question
What device identification features does FortiAuthenticator support?
Answer
Device tracking and MAC authentication.
27
Question
How does FortiGate RADIUS compare to FortiAuthenticator RADIUS in terms of capabilities?
Answer
FortiGate: basic with limited user management and no full token lifecycle. FortiAuthenticator: enterprise-grade, scalable, advanced policies, token/MFA support, logs & monitoring.
28
Question
When should you prefer FortiAuthenticator over FortiGate for RADIUS services?
Answer
In large or complex environments requiring scalability, advanced policies, MFA, and detailed logging.
29
Question
What are the LDAP advantages of FortiAuthenticator over FortiGate?
Answer
FAC can act as LDAP server, integrate multiple sources, provide filtered/virtual views, and serve as directory for certs/802.1X; FortiGate only supports basic queries.
30
Question
Compare FortiGate and FortiAuthenticator FSSO capabilities.
Answer
FortiGate: basic polling only, less scalable. FAC: multiple methods (polling, DC Agent, RADIUS, syslog, SAML), better performance, multi-domain, normalization, session monitoring.