NSE4 · Question #89
Which statements are true regarding local user authentication? (Choose two.)
The correct answer is A. Two-factor authentication can be enabled on a per user basis. D. Both the usernames and passwords can be stored locally on the FortiGate. FortiGate local user accounts can have two-factor authentication enabled individually, and both their usernames and passwords are stored directly on the FortiGate device.
Question
Which statements are true regarding local user authentication? (Choose two.)
Options
- ATwo-factor authentication can be enabled on a per user basis.
- BLocal users are for administration accounts only and cannot be used to authenticate network
- CAdministrators can create the user accounts is a remote server and store the user passwords
- DBoth the usernames and passwords can be stored locally on the FortiGate
How the community answered
(29 responses)- A97% (28)
- C3% (1)
Why each option
FortiGate local user accounts can have two-factor authentication enabled individually, and both their usernames and passwords are stored directly on the FortiGate device.
FortiGate allows administrators to enable two-factor authentication (e.g., using FortiToken) for individual local user accounts, adding an extra layer of security beyond just a password.
Local users can be used for both administration access to the FortiGate and for authenticating network users accessing resources protected by the FortiGate, such as VPNs or WiFi portals.
While administrators can create user accounts, if the accounts and passwords are to be stored on a remote server (e.g., RADIUS, LDAP), those would be considered remote users, not local users.
Local user authentication on a FortiGate means that the user accounts, including their usernames and hashed passwords, are created and stored directly within the FortiGate's internal database, not on an external server.
Concept tested: FortiGate local user authentication features
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/52671/local-user-authentication
Topics
Community Discussion
No community discussion yet for this question.