nerdexam
Fortinet

NSE4 · Question #435

Which authentication scheme is not supported by the RADIUS implementation on FortiGate?

The correct answer is D. FSSO. This question seeks to identify which authentication scheme is not supported by FortiGate's RADIUS implementation.

Submitted by kwame.gh· Apr 18, 2026Firewall and Authentication

Question

Which authentication scheme is not supported by the RADIUS implementation on FortiGate?

Options

  • ACHAP
  • BMSCHAP2
  • CPAP
  • DFSSO

How the community answered

(18 responses)
  • B
    6% (1)
  • D
    94% (17)

Why each option

This question seeks to identify which authentication scheme is not supported by FortiGate's RADIUS implementation.

ACHAP

CHAP (Challenge-Handshake Authentication Protocol) is a standard and supported authentication scheme used by RADIUS and implemented by FortiGate.

BMSCHAP2

MSCHAP2 (Microsoft Challenge-Handshake Authentication Protocol version 2) is a common and more secure variant of CHAP, fully supported by RADIUS and FortiGate.

CPAP

PAP (Password Authentication Protocol) is a basic authentication scheme that is supported by RADIUS and FortiGate, although it is considered less secure as credentials are sent in plain text.

DFSSOCorrect

FSSO (Fortinet Single Sign-On) is an entirely separate authentication solution that integrates with Active Directory for transparent user authentication, and it is not a RADIUS authentication scheme or protocol.

Concept tested: FortiGate RADIUS authentication schemes

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/339230/external-authentication

Topics

#RADIUS#Authentication Protocols#FSSO#FortiGate

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice