Fortinet NSE6_FNC-7.2 Fortinet NSE 6 - FortiNAC 7.2 Exam Practice Test

Page: 1 / 14
Total 57 questions
Question 1

In an isolation VLAN which three services does FortiNAC supply? (Choose three.)



Answer : B, C, D

In an isolation VLAN, FortiNAC supplies DHCP and DNS services. The guide specifies that FortiNAC has a DHCP scope defined for a particular VLAN and should be the only DHCP server available to hosts on that VLAN. Additionally, hosts on the VLAN would get a DNS server configuration of the FortiNAC IP for that VLAN


Question 2

Which agent can receive and display messages from FortiNAC to the end user?



Answer : B

The persistent agent has the ability to display messages on the desktop of an endpoint. These messages can target an individual host, a group of hosts, or all hosts with the persistent agent installed. The messaging options include sending a message content with an optional web address link


Question 3

What method of communication does FortiNAC use to control VPN host access on FortiGate?



Answer : B


Question 4

How are logical networks assigned to endpoints?



Answer : A

Logical networks are assigned to endpoints through device profiling rules in FortiNAC. These networks appear in device Model Configuration views and are used for endpoint isolation based on the endpoint's state or status


Question 5

In which view would you find who made modifications to a Group?



Answer : D

It's important to audit Group Policy changes in order to determine the details of changes made to Group Policies by delegated users.


Question 6

Refer to the exhibit.

If you are forcing the registration of unknown (rogue) hosts, and an unknown (rogue) host connects to a port on the switch, what occurs?



Answer : A

The exhibit shows a configuration panel where VLAN IDs are specified for different states, such as Default, Registration, and Authentication. When forcing the registration of unknown (rogue) hosts, if an unknown host connects to a port on the switch, the FortiNAC system will move the host to the VLAN designated for Registration. In the exhibit, the VLAN ID for Registration is set to 111, hence the host would be moved to VLAN 111 to undergo the registration process.


Question 7

Which two agents can validate endpoint compliance transparently to the end user? (Choose two.)



Answer : A, D

Both dissolvable and persistent agents can be used to validate endpoint compliance transparently to the end user. The persistent agent stays resident on the endpoint and performs scheduled scans in the background. The dissolvable agent is a run-once agent that dissolves after reporting its results, leaving no footprint on the endpoint


Page:    1 / 14   
Total 57 questions