exam questions

Exam NSE6_FAC-6.1 All Questions

View all questions & answers for the NSE6_FAC-6.1 exam

Exam NSE6_FAC-6.1 topic 1 question 8 discussion

Actual exam question from Fortinet's NSE6_FAC-6.1
Question #: 8
Topic #: 1
[All NSE6_FAC-6.1 Questions]

Which two statements about the EAP-TTLS authentication method are true? (Choose two.)

  • A. Supports a port access control (wired) solution only
  • B. Uses digital certificates only on the server side
  • C. Uses mutual authentication
  • D. Requires an EAP server certificate
Show Suggested Answer Hide Answer
Suggested Answer: BD 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Artbrut
1 year, 2 months ago
Selected Answer: BD
Hvae to correct myself, think it´s B and D. You need an EAP server certificate, and opposite to EAP-TLS, EAP-TTLS only uses server side certificates. EAP-TLS uses also client-side certificates = mutual authentication
upvoted 1 times
...
Artbrut
1 year, 3 months ago
Selected Answer: BC
https://docs.fortinet.com/document/fortiauthenticator/6.6.0/administration-guide/125951/extensible-authentication-protocol
upvoted 1 times
...
Shamrock
2 years, 2 months ago
B & C reference: rfc-editor.org/rfc/rfc5281 reference: globalreachtech.com/why-eap-ttls/
upvoted 3 times
...
faeem
2 years, 2 months ago
I think it is B and D. EAP-TTLS/PAP uses Cleartext Credentials EAP-TTLS/PAP is a credential-based authentication protocol that was initially designed to make the setup more accessible by requiring only the server to be authenticated, with client authentication being optional. Here, the credentials are delivered over the air in “clear text,” which means they are not encrypted and may be deciphered easily.
upvoted 1 times
...
theklee
2 years, 2 months ago
B and C. It's mutual authentication but the client isn't using cert auth. EAP-TTLS (or tunneled transport layer security) extends the TLS protocol. It uses digital certificates on the server side only. After the server is securely authenticated to the client, it uses the tunnel (the secure connection) to authenticate the client. P. 381
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago