Fortinet NSE6_FNC-9.1 Exam Questions Instant Access

Question 1

Where do you look to determine when and why the FortiNAC made an automated network access change?

AThe Event view

BThe Port Changes view

CThe Connections view

DThe Admin Auditing view

Answer : B

Study Guide p. 356: Any time FortiNAC changes network access for an endpoint, the change is documented on the Port Changes view. This provides an administrator with valuable information when validating control configurations and enforcement.

Question 2

Which connecting endpoints are evaluated against all enabled device profiling rules?

AAll hosts, each time they connect

BRogues devices, only when they connect for the first time

CKnown trusted devices each time they change location

DRogues devices, each time they connect

Answer : D

FortiNAC process to classify rogue devices and create an organized inventory of known trusted registered devices.

Question 3

An administrator wants the Host At Risk event to generate an alarm. What is used to achieve this result?

AA security trigger activity

BA security filter

CAn event to alarm mapping

DAn event to action mapping

Answer : C

Question 4

View the command and output shown in the exhibit.

What is the current state of this host?

ARogue

BRegistered

CNot authenticated

DAt-Risk

Answer : C

Question 5

Which command line shell and scripting language does FortiNAC use for WinRM?

ALinux

BBash

CDOS

DPowershell

Answer : D

Open Windows PowerShell or a command prompt. Run the following command to determine if you already have WinRM over HTTPS configured.

Admin Guide on p. 362, 'Matches if the device successfully responds to a WinRM client session request. User name and password credentials are required. If there are multiple credentials, each set of credentials will be attempted to find a potential match. The commands are used to automate interaction with the device. Each command is run via Powershell.'

Question 6

What would happen if a port was placed in both the Forced Registration and the Forced Remediation port groups?

AOnly rogue hosts would be impacted.

BBoth enforcement groups cannot contain the same port.

COnly al-risk hosts would be impacted.

DBoth types of enforcement would be applied.

Answer : B

Question 7

When you create a user or host profile; which three criteria can you use? (Choose three.)

AAn applied access policy

BAdministrative group membership

CLocation

DHost or user group memberships

EHost or user attributes

Answer : C, D, E

Fortinac-admin-operations, P. 391

Fortinet NSE 6 - FortiNAC 9.1 NSE6_FNC-9.1 Exam Questions