Which two statements about the EAP-TTLS authentication method are true? (Choose two)

A. Uses mutualauthentication

B. Uses digital certificates only on the server side

C. Requires an EAP server certificate

D. Support a port access control (wired) solution only

You are a FortiAuthenticator administrator for a large organization. Users who are configured to use FortiToken 200 for two-factor authentication can no longer authenticate. You have verified that only the users with two-factor authentication are experiencing the issue.

What can couse this issue?

A. On of the FortiAuthenticator devices in the active-active cluster has failed

B. FortiAuthenticator has lose contact with the FortiToken Cloud servers

C. FortiToken 200 licence has expired

D. Time drift between FortiAuthenticator and hardware tokens

Which two statements about the self-service portal are true? (Choose two)

A. Self-registration information can be sent to the user through email or SMS

B. Realms can be used to configure which seld-registeredusers or groups can authenticate on the network

C. Administrator approval is required for all self-registration

D. Authenticating users must specify domain name along with username

Which method is the most secure way of delivering FortiToken data once the token has been seeded?

A. Online activation of the tokens through the FortiGuard network

B. Shipment of the seed files on a CD using a tamper-evident envelope

C. Using the in-house token provisioning tool

D. Automatic token generation using FortiAuthenticator

Which option correctly describes an SP-initiated SSO SAML packet flow for a host without a SAML assertion?

A. Service provider contacts idendity provider, idendity provider validates principal for service provider, service provider establishes communication with principal

B. Principal contacts idendity provider and is redirected to serviceprovider, principal establishes connection with service provider, service provider validates authentication with identify provider

C. Principal contacts service provider, service provider redirects principal to idendity provider, after succesfull authentication identify provider redirects principal to service provider

D. Principal contacts idendity provider and authenticates, identity provider relays principal to service provider after valid authentication