UPDATED [Nov 15, 2024] Pass Fortinet NSE 6 - FortiNAC 7.2 Exam with Latest Questions
NSE6_FNC-7.2 Exam Practice Questions prepared by Fortinet Professionals
NEW QUESTION # 14
Which three communication methods are used by the FortiNAC to gather information from, and control, infrastructure devices? (Choose three)
- A. OSNMP
- B. FTP
- C. DCLI
- D. RADIUS
- E. SMTP
Answer: B,C,E
NEW QUESTION # 15
Refer to the exhibit.
What would happen if the highlighted port with connected hosts was placed in both the Forced Registration and Forced Remediation port groups?
- A. Enforcement would be applied only to rogue hosts.
- B. Both types of enforcement would be applied.
- C. Only the higher ranked enforcement group would be applied.
- D. Multiple enforcement groups could not contain the same port.
Answer: C
Explanation:
In systems like FortiNAC, when a port is designated to be in multiple enforcement groups, it is common for only the higher-priority or higher-ranked group's policies to be applied. This is to prevent conflicting enforcement actions from being attempted on the same port. Although the specific details of the priority or ranking system are not provided in the extracted references, the principle of hierarchical policy enforcement suggests that only the policies of the higher-ranked group would be applied to the port.
References
* FortiNAC documentation would typically outline this behavior in sections discussing port group enforcement or policy application.
NEW QUESTION # 16
How are logical networks assigned to endpoints?
- A. Through device profiling rules
- B. Through Layer 3 polling configurations
- C. Through FortiGate IPv4 policies
- D. Through network access policies
Answer: A
Explanation:
Logical networks are assigned to endpoints through device profiling rules in FortiNAC. These networks appear in device Model Configuration views and are used for endpoint isolation based on the endpoint's state or status
NEW QUESTION # 17
When FortiNAC is managing FortiGate VPN users, why is an endpoint compliance policy necessary?
- A. To confirm installed security software
- B. To validate the VPN client being used
- C. To designate the required agent type
- D. To validate the VPN user credentials
Answer: A
NEW QUESTION # 18
An administrator wants the Host At Risk event to generate an alarm. What is used to achieve this result?
- A. A security trigger activity
- B. A security filter
- C. An event to alarm mapping
- D. An event to action mapping
Answer: C
Explanation:
To generate an alarm from a Host At Risk event, an administrative user must create an Event to Alarm Mapping for the Vulnerability Scan Failed event. Within this alarm mapping, a host security action must be designated to mark the host at risk
NEW QUESTION # 19
View the command and output.
What is the state of database replication?
- A. Secondary to primary synchronization failed.
- B. Secondary to primary synchronization was successful.
- C. Primary to secondary database synchronization was successful.
- D. Primary to secondary synchronization failed.
Answer: C
Explanation:
The command and output shown in the exhibit indicate that the host FortiNAC-Secondary is referencing FortiNAC-Primary, and it states "Slave is active." In database replication terminology within a high availability setup, the term "Slave is active" typically means that the secondary server (slave) is actively receiving data from the primary server (master). This implies that the synchronization process from the primary to the secondary database has been successful and is currently active.
References
* FortiNAC 7.2 Study Guide, Security Policies section
NEW QUESTION # 20
In a wireless integration, what method does FortiNAC use to obtain connecting MAC address information?
- A. Endstation traffic monitoring
D Link traps - B. RADIUS
- C. SNMP traps
Answer: B
Explanation:
In a wireless integration, FortiNAC uses RADIUS to obtain connecting MAC address information. This includes RADIUS requests to FortiNAC and subsequent RADIUS responses from FortiNAC to the requesting device
NEW QUESTION # 21
Where should you configure MAC notification traps on a supported switch?
- A. Configure them on all ports except uplink ports.
- B. Configure them only on ports set as 802 1g trunks.
- C. Configure them on all ports on the switch.
- D. Configure them only after you configure linkup and linkdown traps.
Answer: B
Explanation:
In general, for network switches supporting MAC notification traps, it's advisable to configure these traps on all ports except uplink ports. Uplink ports are used for connecting to other switches or network infrastructure devices and typically don't need MAC notification traps, which are more relevant for end-device connectivity monitoring.
The study guide specifies that MAC notification traps should not be configured on interfaces that are uplinks.
They are the preferred method for learning and updating Layer 2 information and should be used whenever available, but not on uplink interfaces.
NEW QUESTION # 22
Refer to the exhibit.
When a contractor account is created using this template, what value will be set in the accounts Rote field?
- A. Eng-Contractor
- B. Conti actor
- C. Accounting Contractor
- D. Engineer-Contractor
Answer: D
NEW QUESTION # 23
During the on-boarding process through the captive portal, what are two reasons why a host that successfully registered would remain stuck in the Registration VLAN? (Choose two.)
- A. Bridging is enabled on the host.
- B. There is another unregistered host on the same port.
- C. The wrong agent is installed.
- D. The port default VLAN is the same as the Registration VLAN.
Answer: B,D
NEW QUESTION # 24
What would happen if a port was placed in both the Forced Registration and the Forced Remediation port groups?
- A. Both enforcement groups cannot contain the same port.
- B. Only al-risk hosts would be impacted.
- C. Only rogue hosts would be impacted.
- D. Both types of enforcement would be applied.
Answer: C
NEW QUESTION # 25
Refer to the exhibit, and then answer the question below.
Which host is rogue?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
NEW QUESTION # 26
Which two things must be done to allow FortiNAC to process incoming syslog messages from an unknown vendor? (Choose two.)
- A. The device sending the messages must be modeled in the Network Inventory view.
- B. A security event parser must be created for the device.
- C. The device must be added as a log receiver.
- D. The device must be added as a patch management server.
Answer: A,B
Explanation:
To allow FortiNAC to process incoming syslog messages from an unknown vendor, two steps must be taken:
* Creation of a customized event parser: This enables FortiNAC to parse and integrate syslog messages from any vendor or device, as long as the messages are in CSV, CEF, or Tag/Value format.
* Modeling the device in the Topology view: Any device that sends syslog messages to FortiNAC must be modeled in this view. FortiNAC will not process syslog or trap messages unless the source address belongs to a device modeled in the topology.
References
* FortiNAC 7.2 Study Guide, pages 428 and 399
NEW QUESTION # 27
What would occur if both an unknown (rogue) device and a known (trusted) device simultaneously appeared on a port that is a member of the Forced Registration port group?
- A. The port would not be managed, and an event would be generated.
- B. The port would be administratively shut down.
- C. The port would be provisioned for the normal state host, and both hosts would have access to that VLAN.
- D. The port would be provisioned to the registration network, and both hosts would be isolated.
Answer: C
NEW QUESTION # 28
Where do you look to determine when and why the FortiNAC made an automated network access change?
- A. The Connections view
- B. The Admin Auditing view
- C. The Event view
- D. The Port Changes view
Answer: D
NEW QUESTION # 29
Which three circumstances trigger Layer 2 polling of infrastructure devices? (Choose three.)
- A. A failed Layer 3 poll
- B. Manual polling
- C. Linkup and Linkdown traps
- D. A matched security policy
- E. Scheduled poll timings
Answer: A,E
NEW QUESTION # 30
By default, if more than 20 hosts are seen connected on a single port simultaneously, what will happen to the port?
- A. The port is switched into the Dead-End VLAN.
- B. The port is added to the Forced Registration group.
- C. The port becomes a threshold uplink.
- D. The port is disabled.
Answer: A
NEW QUESTION # 31
Which devices would be evaluated by device profiling rules?
- A. All hosts, each time they connect
- B. Rogue devices, each time they connect
- C. Known trusted devices, each time they change location
- D. Rogue devices, only when they are initially added to the database
Answer: B
NEW QUESTION # 32
During the on-boarding process through the captive portal, why would a host that successfully registered remain stuck in the Registration VLAN? (Choose two.)
- A. There is another unregistered host on the same port.
- B. The ports default VLAN is the same as the Registration VLAN.
- C. The wrong agent is installed.
- D. Bridging is enabled on the host
Answer: B,C
NEW QUESTION # 33
......
NSE6_FNC-7.2 Exam Practice Materials Collection: https://www.practicedump.com/NSE6_FNC-7.2_actualtests.html
Use Valid New NSE6_FNC-7.2 Questions - Top choice Help You Gain Success: https://drive.google.com/open?id=1Ut3rl57VZ1JLliAw3DJfhiuKt36P7btH