With enforcement for network access policies and at-risk hosts enabled, what will happen if a host matches a network access policy and has a state of 'at risk'?

The host is provisioned based on the default access defined by the point of connection.

The host is provisioned based on the network access policy.

The host is administratively disabled.

When you create a user or host profile; which three criteria can you use? (Choose three.)

Administrative group membership

The port becomes a threshold uplink.

The port is switched into the Dead-End VLAN.

The port becomes a threshold uplink.

The port is added to the Forced Registration group.

The host has failed an endpoint compliance policy or admin scan.

The logged on user is not found in the Active Directory.

The host has been administratively disabled.

The host is not in the Registered Hosts group.

The primary server Is running and in control.

The database replication failed.

The secondary server is running and in control.

Fallover from the primary server to the secondary server is in progress.

The primary device shuts down NAC processes and changes to a management down status.

The primary device continues to operate as the in-control device and changes the status or secondary device to contact lost.

The primary device changes its designation to secondary, and the secondary device changes to primary.

The primary device shuts down NAC processes and changes to a management down status.

The primary device waits 3 minutes and attempts to re-establish the HA heartbeat before attempting a second ping of the gateway.

To meet the client security profile rule for scanning connecting clients

To collect user authentication details

To meet the client security profile rule for scanning connecting clients

To collect the client IP address and MAC address

To transparently update the client IP address upon successful authentication

Global authentication security policies

Global infrastructure device inventory

There can be more than one isolation network of each type.

Any scopes beyond the first scope are used if the Initial scope runs out of IP addresses.

Configuring more than one DHCP scope allows for DHCP server redundancy.

The Layer 3 network type allows for one scope for each possible host status.

Where do you look to determine when and why the FortiNAC made an automated network access change?

Become a Premium Member for full access