Fortinet NSE6_FNC-9.1 Exam Questions Instant Access

Question 1

What capability do logical networks provide?

APoint of access-base autopopulation of device groups'

BInteractive topology view diagrams

CApplication of different access values from a single access policy

DIVLAN -based inventory reporting

Answer : C

Logical Networks allow you to create fewer Network Access Policies than before. (FortiNAC - What's new in FortiNAC 8.5)

Question 2

Refer to the exhibit, and then answer the question below.

Which host is rogue?

Answer : B

Question 3

An administrator is configuring FortiNAC to manage FortiGate VPN users. As part of the configuration, the administrator must configure a few FortiGate firewall policies.

What is the purpose of the FortiGate firewall policy that applies to unauthorized VPN clients?

ATo deny access to only the production DNS server

BTo allow access to only the FortiNAC VPN interface

CTo allow access to only the production DNS server

DTo deny access to only the FortiNAC VPN interface

Answer : B

Question 4

Which three are components of a security rule? (Choose three.)

AMethods

BSecurity String

CTrigger

DUser or host profile

EAction

Answer : C, D, E

Question 5

Which two things must be done to allow FortiNAC to process incoming syslog messages from an unknown vendor? (Choose two.)

AA security event parser must be created for the device.

BThe device sending the messages must be modeled in the Network Inventory view.

CThe device must be added as a patch management server.

DThe device must be added as a log receiver.

Answer : A, D

Question 6

Which system group will force at-risk hosts into the quarantine network, based on point of connection?

APhysical Address Filtering

BForced Quarantine

CForced Isolation

DForced Remediation

Answer : B

Forced Quarantine, study guide 7.2 pag 245 and 248

Question 7

View the command and output shown in the exhibit.

What is the current state of this host?

ARogue

BRegistered

CNot authenticated

DAt-Risk

Answer : C

Fortinet NSE 6 - FortiNAC 9.1 NSE6_FNC-9.1 Exam Questions