Fortinet NSE6_FNC-9.1 Exam Practice Test Instant Access

Question 1

In a wireless integration, what method does FortiNAC use to obtain connecting MAC address information?

ASNMP traps

BRADIUS

CEndstation traffic monitoring
D Link traps

Answer : B

Question 2

When FortiNAC is managing FortiGate VPN users, why is an endpoint compliance policy necessary?

ATo confirm installed security software

BTo validate the VPN user credentials

CTo designate the required agent type

DTo validate the VPN client being used

Answer : A

Question 3

With enforcement for network access policies and at-risk hosts enabled, what will happen if a host matches a network access policy and has a state of "at risk"?

AThe host is provisioned based on the default access defined by the point of connection.

BThe host is provisioned based on the network access policy.

CThe host is isolated.

DThe host is administratively disabled.

Answer : C

https://training.fortinet.com/pluginfile.php/1912463/mod_resource/content/26/FortiNAC_7.2_Study_Guide-Online.pdf C. Page 327 - moved to the quarantine isolation network

Question 4

What agent is required in order to detect an added USB drive?

APersistent

BDissolvable

CMobile

DPassive

Answer : A

Expand the Persistent Agent folder. Select USB Detection from the tree.

1. Click System > Settings.

2. Expand the Persistent Agent folder.

3. Select USB Detection from the tree.

4. Click Add or select an existing USB drive and click Modify.

Question 5

In an isolation VLAN which three services does FortiNAC supply? (Choose three.)

ANTP

BDHCP

CWeb

DDNS

EISMTP

Answer : B, C, D

Question 6

Which two of the following are required for endpoint compliance monitors? (Choose two.)

APersistent agent

BLogged on user

CSecurity rule

DCustom scan

Answer : A, D

DirectDefense's analysis of FireEye Endpoint attests that the products help meet the HIPAA Security Rule.

In the menu on the left click the + sign next to Endpoint Compliance to open it.

https://docs.fortinet.com/document/fortinac/8.5.2/administration-guide/92047/add-or-modify-a-scan

Question 7

During the on-boarding process through the captive portal, what are two reasons why a host that successfully registered would remain stuck in the Registration VLAN? (Choose two.)

AThe wrong agent is installed.

BThe port default VLAN is the same as the Registration VLAN.

CBridging is enabled on the host.

DThere is another unregistered host on the same port.

Answer : B, D

Fortinet NSE 6 - FortiNAC 9.1 NSE6_FNC-9.1 Exam Practice Test