StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · FortiSASE and onboarding

Practice question 97 of 440 · hard

A PAC file sends the IdP sign-in URL through a proxy that first requires that same sign-in. Users cannot finish authentication. What configuration should be checked?

Choose the single best answer.

  1. A.Route every IdP URL through the same proxy without any authentication exception
  2. B.Require completion of the proxy login before allowing any IdP destination
  3. C.Remove the IdP from all reachable paths rather than providing the required exception
  4. D.Required IdP exclusions/direct access in the PAC authentication path
Show the answer and explanation

✓ Correct answer

  • Required IdP exclusions/direct access in the PAC authentication path

Check required direct exclusions so the user can reach the IdP before the proxy authentication completes. Requiring the unresolved login first or removing IdP reachability preserves the dependency loop.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.