Where do you look to determine which network access policy, if any is being applied to a particular host?

The Policy Details view for the host

The Port Properties view of the hosts port

What capability do logical networks provide?

Application of different access values from a single access policy

Point of access-base autopopulation of device groups'

Interactive topology view diagrams

Application of different access values from a single access policy

IVLAN -based inventory reporting

How are logical networks assigned to endpoints?

Through network access policies

Through Layer 3 polling configurations

Through FortiGate IPv4 policies

By default, if after a successful Layer 2 poll, more than 20 endpoints are seen connected on a single switch port simultaneously, what happens to the port?

The port becomes a threshold uplink

The port is added to the Forced Registration group

The port is switched into the Dead-End VLAN

An administrator is configuring FortiNAC to manage FortiGate VPN users. As part of the configuration, the administrator must configure a few FortiGate firewall policies.What is the purpose of the FortiGate firewall policy that applies to unauthorized VPN clients?

To allow access to only the FortiNAC VPN interface

To deny access to only the production DNS server

To allow access to only the FortiNAC VPN interface

To allow access to only the production DNS server

To deny access to only the FortiNAC VPN interface

During the on-boarding process through the captive portal, what are two reasons why a host that successfully registered would remain stuck in the Registration VLAN? (Choose two.)

The port default VLAN is the same as the Registration VLAN.

There is another unregistered host on the same port.

The port default VLAN is the same as the Registration VLAN.

Bridging is enabled on the host.

There is another unregistered host on the same port.

When FortiNAC is managing FortiGate VPN users, why is an endpoint compliance policy necessary?

To confirm installed security software

To validate the VPN user credentials

To designate the required agent type

To validate the VPN client being used

Which two things must be done to allow FortiNAC to process incoming syslog messages from an unknown vendor? (Choose two.)

A security event parser must be created for the device.

The device sending the messages must be modeled in the Network Inventory view.

A security event parser must be created for the device.

The device sending the messages must be modeled in the Network Inventory view.

The device must be added as a patch management server.

The device must be added as a log receiver.

Which two methods can be used to gather a list of installed applications and application details from a host? (Choose two.)

Portal page on-boarding options

Application layer traffic inspection

Which devices would be evaluated by device profiling rules?

All hosts, each time they connect

Rogue devices, each time they connect

All hosts, each time they connect

Known trusted devices, each time they change location

Rogue devices, only when they are initially added to the database

Refer to the exhibit. If a host is connected to a port in the Building 1 First Floor Ports group, what must also be true to match this user/host profile?

The host must have a role value of contractor or an installed persistent agent or a security access value of contractor, and be connected between 6 AM and 5 PM.

The host must have a role value of contractor, an installed persistent agent or a security access value of contractor, and be connected between 6 AM and 5 PM.

The host must have a role value of contractor or an installed persistent agent, a security access value of contractor, and be connected between 9 AM and 5 PM.

The host must have a role value of contractor or an installed persistent agent and a security access value of contractor, and be connected between 6 AM and 5 PM.

The host must have a role value of contractor or an installed persistent agent or a security access value of contractor, and be connected between 6 AM and 5 PM.

Refer to the exhibit. Considering the host status of the two hosts connected to the same wired port, what will happen if the port is a member of the Forced Registration port group?

The port will be provisioned to the registration network, and both hosts will be isolated.

The port will be provisioned for the normal state host, and both hosts will have access to that VLAN.

The port will not be managed, and an event will be generated.

The port will be provisioned to the registration network, and both hosts will be isolated.

The port will be administratively shut down.

Refer to the exhibit. If you are forcing the registration of unknown (rogue) hosts, and an unknown (rogue) host connects to a port on the switch, what occurs?

The host is moved to a default isolation VLAN.

View the command and output. What is the state of database replication?

Primary to secondary database synchronization was successful.

Secondary to primary synchronization failed.

Primary to secondary synchronization failed.

Secondary to primary synchronization was successful.

Primary to secondary database synchronization was successful.

Refer to the exhibit. What would happen if the highlighted port with connected hosts was placed in both the Forced Registration and Forced Remediation port groups?

Only the higher ranked enforcement group would be applied.

Multiple enforcement groups could not contain the same port.

Only the higher ranked enforcement group would be applied.

Both types of enforcement would be applied.

Enforcement would be applied only to rogue hosts.

Which connecting endpoints are evaluated against all enabled device profiling rules?

Rogues devices, each time they connect

All hosts, each time they connect

Rogues devices, only when they connect for the first time

Known trusted devices each time they change location

Rogues devices, each time they connect

What would occur if both an unknown (rogue) device and a known (trusted) device simultaneously appeared on a port that is a member of the Forced Registration port group?

The port would be provisioned to the registration network, and both hosts would be isolated.

The port would be provisioned for the normal state host, and both hosts would have access to that VLAN.

The port would not be managed, and an event would be generated.

The port would be provisioned to the registration network, and both hosts would be isolated.

The port would be administratively shut down.

Where are logical network values defined?

In the model configuration view of each infrastructure device

In the port properties view of each port

In the security and access field of each host record

What would happen if a port was placed in both the Forced Registration and the Forced Remediation port groups?

Both enforcement groups cannot contain the same port.

Only rogue hosts would be impacted.

Both enforcement groups cannot contain the same port.

Only al-risk hosts would be impacted.

Both types of enforcement would be applied.

Fortinet NSE6_FNC-7.2 Practice Test 1 - Free Online Exam Prep & Questions

Question 1 / 40

Where should you configure MAC notification traps on a supported switch?

Configure them only after you configure linkup and linkdown traps.

Configure them on all ports on the switch.

Configure them only on ports set as 802 1g trunks.

Configure them on all ports except uplink ports.

Comment (0)

Fortinet NSE6_FNC-7.2 Practice Test 1

Question

Fortinet NSE6_FNC-7.2 Practice Tests

Practice Tests