nerdexam
Fortinet

NSE4 · Question #89

Which statements are true regarding local user authentication? (Choose two.)

The correct answer is A. Two-factor authentication can be enabled on a per user basis. D. Both the usernames and passwords can be stored locally on the FortiGate. FortiGate local user accounts can have two-factor authentication enabled individually, and both their usernames and passwords are stored directly on the FortiGate device.

Submitted by jian89· Apr 18, 2026Firewall and Authentication

Question

Which statements are true regarding local user authentication? (Choose two.)

Options

  • ATwo-factor authentication can be enabled on a per user basis.
  • BLocal users are for administration accounts only and cannot be used to authenticate network
  • CAdministrators can create the user accounts is a remote server and store the user passwords
  • DBoth the usernames and passwords can be stored locally on the FortiGate

How the community answered

(29 responses)
  • A
    97% (28)
  • C
    3% (1)

Why each option

FortiGate local user accounts can have two-factor authentication enabled individually, and both their usernames and passwords are stored directly on the FortiGate device.

ATwo-factor authentication can be enabled on a per user basis.Correct

FortiGate allows administrators to enable two-factor authentication (e.g., using FortiToken) for individual local user accounts, adding an extra layer of security beyond just a password.

BLocal users are for administration accounts only and cannot be used to authenticate network

Local users can be used for both administration access to the FortiGate and for authenticating network users accessing resources protected by the FortiGate, such as VPNs or WiFi portals.

CAdministrators can create the user accounts is a remote server and store the user passwords

While administrators can create user accounts, if the accounts and passwords are to be stored on a remote server (e.g., RADIUS, LDAP), those would be considered remote users, not local users.

DBoth the usernames and passwords can be stored locally on the FortiGateCorrect

Local user authentication on a FortiGate means that the user accounts, including their usernames and hashed passwords, are created and stored directly within the FortiGate's internal database, not on an external server.

Concept tested: FortiGate local user authentication features

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/52671/local-user-authentication

Topics

#Local users#User authentication#FortiGate#Two-factor authentication

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice