Fortinet NSE6_FNC-9.1 Exam Questions Instant Access

Question 1

With enforcement for network access policies and at-risk hosts enabled, what will happen if a host matches a network access policy and has a state of "at risk"?

AThe host is provisioned based on the default access defined by the point of connection.

BThe host is provisioned based on the network access policy.

CThe host is isolated.

DThe host is administratively disabled.

Answer : C

https://training.fortinet.com/pluginfile.php/1912463/mod_resource/content/26/FortiNAC_7.2_Study_Guide-Online.pdf C. Page 327 - moved to the quarantine isolation network

Question 2

Where should you configure MAC notification traps on a supported switch?

AConfigure them only after you configure linkup and linkdown traps.

BConfigure them on all ports on the switch.

CConfigure them only on ports set as 802 1g trunks.

DConfigure them on all ports except uplink ports.

Answer : D

Question 3

How are logical networks assigned to endpoints?

AThrough device profiling rules

BThrough network access policies

CThrough Layer 3 polling configurations

DThrough FortiGate IPv4 policies

Answer : B

Question 4

Which two device classification options can register a device automatically and transparently to the end user? (Choose two.)

ADissolvable agent

BDotlxAuto Registration

CDevice importing

DMDM integration

ECaptive portal

Answer : B, D

Question 5

Which agent is used only as part of a login script?

AMobile

BPassive

CPersistent

DDissolvable

Answer : B

If the logon script runs the logon application in persistent mode, configure your Active Directory server not to run scripts synchronously.

Question 6

Where do you look to determine when and why the FortiNAC made an automated network access change?

AThe Event view

BThe Port Changes view

CThe Connections view

DThe Admin Auditing view

Answer : B

Study Guide p. 356: Any time FortiNAC changes network access for an endpoint, the change is documented on the Port Changes view. This provides an administrator with valuable information when validating control configurations and enforcement.

Question 7

When you create a user or host profile; which three criteria can you use? (Choose three.)

AAn applied access policy

BAdministrative group membership

CLocation

DHost or user group memberships

EHost or user attributes

Answer : C, D, E

Fortinac-admin-operations, P. 391

Fortinet NSE 6 - FortiNAC 9.1 NSE6_FNC-9.1 Exam Questions