NSE4 · Question #435
Which authentication scheme is not supported by the RADIUS implementation on FortiGate?
The correct answer is D. FSSO. This question seeks to identify which authentication scheme is not supported by FortiGate's RADIUS implementation.
Question
Which authentication scheme is not supported by the RADIUS implementation on FortiGate?
Options
- ACHAP
- BMSCHAP2
- CPAP
- DFSSO
How the community answered
(18 responses)- B6% (1)
- D94% (17)
Why each option
This question seeks to identify which authentication scheme is not supported by FortiGate's RADIUS implementation.
CHAP (Challenge-Handshake Authentication Protocol) is a standard and supported authentication scheme used by RADIUS and implemented by FortiGate.
MSCHAP2 (Microsoft Challenge-Handshake Authentication Protocol version 2) is a common and more secure variant of CHAP, fully supported by RADIUS and FortiGate.
PAP (Password Authentication Protocol) is a basic authentication scheme that is supported by RADIUS and FortiGate, although it is considered less secure as credentials are sent in plain text.
FSSO (Fortinet Single Sign-On) is an entirely separate authentication solution that integrates with Active Directory for transparent user authentication, and it is not a RADIUS authentication scheme or protocol.
Concept tested: FortiGate RADIUS authentication schemes
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/339230/external-authentication
Topics
Community Discussion
No community discussion yet for this question.