Fortinet NSE6_FNC-9.1 Exam Practice Test Instant Access

Question 1

What causes a host's state to change to "at risk"?

AThe host has failed an endpoint compliance policy or admin scan.

BThe logged on user is not found in the Active Directory.

CThe host has been administratively disabled.

DThe host is not in the Registered Hosts group.

Answer : A

Failure -- Indicates that the host has failed the scan. This option can also be set manually. When the status is set to Failure the host is marked 'At Risk' for the selected scan.

p. 244 of the Study Guide, 'A state of at-risk indicates the host has failed a scan. This could be a compliance scan or an administrative scan.'

Question 2

Which connecting endpoints are evaluated against all enabled device profiling rules?

AAll hosts, each time they connect

BRogues devices, only when they connect for the first time

CKnown trusted devices each time they change location

DRogues devices, each time they connect

Answer : D

FortiNAC process to classify rogue devices and create an organized inventory of known trusted registered devices.

Question 3

In an isolation VLAN which three services does FortiNAC supply? (Choose three.)

ANTP

BDHCP

CWeb

DDNS

EISMTP

Answer : B, C, D

Question 4

Which system group will force at-risk hosts into the quarantine network, based on point of connection?

APhysical Address Filtering

BForced Quarantine

CForced Isolation

DForced Remediation

Answer : B

Forced Quarantine, study guide 7.2 pag 245 and 248

Question 5

When FortiNAC passes a firewall tag to FortiGate, what determines the value that is passed?

ASecurity rule

BDevice profiling rule

CRADIUS group attribute

DLogical network

Answer : D

Question 6

Which group type can have members added directly from the FortiNAC Control Manager?

AAdministrator

BDevice

CPort

DHost

Answer : A

Question 7

Which agent is used only as part of a login script?

AMobile

BPassive

CPersistent

DDissolvable

Answer : B

If the logon script runs the logon application in persistent mode, configure your Active Directory server not to run scripts synchronously.

Fortinet NSE6_FNC-9.1 Fortinet NSE 6 - FortiNAC 9.1 Exam Practice Test