NSE4 · Question #341
How does FortiGate verify the login credentials of a remote LDAP user?
The correct answer is D. FortiGate queries the LDAP server for credentials. FortiGate authenticates remote LDAP users by sending their login credentials to the LDAP server, which then verifies them against its own directory database and returns an authentication result.
Question
How does FortiGate verify the login credentials of a remote LDAP user?
Options
- AFortiGate sends the user entered credentials to the LDAP server for authentication.
- BFortiGate re-generates the algorithm based on the login credentials and compares it against the
- CFortiGate queries its own database for credentials.
- DFortiGate queries the LDAP server for credentials.
How the community answered
(34 responses)- A3% (1)
- C6% (2)
- D91% (31)
Why each option
FortiGate authenticates remote LDAP users by sending their login credentials to the LDAP server, which then verifies them against its own directory database and returns an authentication result.
While the FortiGate does send user credentials, "sends for authentication" describes the method, whereas "queries the LDAP server for credentials" better encompasses the client-server interaction where the FortiGate asks the LDAP server to validate the presented credentials.
FortiGate does not store or regenerate algorithms for remote LDAP user passwords; credential verification is handled entirely by the external LDAP server.
For remote LDAP users, FortiGate relies on the external LDAP server for authentication, not its own local user database.
FortiGate acts as an LDAP client, sending a query (typically an LDAP bind request with the user's provided credentials) to the configured LDAP server, which then validates these credentials against its internal user database.
Concept tested: FortiGate LDAP authentication process
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/330560/ldap-authentication
Topics
Community Discussion
No community discussion yet for this question.