Fortinet NSE6_FNC-9.1 Exam Practice Test Instant Access

Question 1

When FortiNAC passes a firewall tag to FortiGate, what determines the value that is passed?

ASecurity rule

BDevice profiling rule

CRADIUS group attribute

DLogical network

Answer : D

Question 2

Where should you configure MAC notification traps on a supported switch?

AConfigure them only after you configure linkup and linkdown traps.

BConfigure them on all ports on the switch.

CConfigure them only on ports set as 802 1g trunks.

DConfigure them on all ports except uplink ports.

Answer : D

Question 3

While troubleshooting a network connectivity issue, an administrator determines that a device was being automatically provisioned to an incorrect VLAN.

Where would the administrator look to determine when and why FortiNAC made the network access change?

AThe Event view

BThe Admin Auditing view

CThe Port Changes view

DThe Connections view

Answer : C

Question 4

Refer to the exhibit, and then answer the question below.

Which host is rogue?

Answer : B

Question 5

What causes a host's state to change to "at risk"?

AThe host has failed an endpoint compliance policy or admin scan.

BThe logged on user is not found in the Active Directory.

CThe host has been administratively disabled.

DThe host is not in the Registered Hosts group.

Answer : A

Failure -- Indicates that the host has failed the scan. This option can also be set manually. When the status is set to Failure the host is marked 'At Risk' for the selected scan.

p. 244 of the Study Guide, 'A state of at-risk indicates the host has failed a scan. This could be a compliance scan or an administrative scan.'

Question 6

When FortiNAC is managing FortiGate VPN users, why is an endpoint compliance policy necessary?

ATo confirm installed security software

BTo validate the VPN user credentials

CTo designate the required agent type

DTo validate the VPN client being used

Answer : A

Question 7

Which agent is used only as part of a login script?

AMobile

BPassive

CPersistent

DDissolvable

Answer : B

If the logon script runs the logon application in persistent mode, configure your Active Directory server not to run scripts synchronously.

Fortinet NSE 6 - FortiNAC 9.1 NSE6_FNC-9.1 Exam Practice Test