ExamGecko
Search Search Login
Home Home / Fortinet / NSE7_ZTA-7.2
Question list
Search
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

With the increase in loT devices, which two challenges do enterprises face? (Choose two.)
Which three methods can you use to trigger layer 2 polling on FortiNAC? (Choose three)
exhibit. User student is not able to log in to SSL VPN Given the output showing a real-time debug: which statement describes the login failure?
Exhibit. Which two statements are true about the hr endpoint? (Choose two.)
Which statement is true about FortiClient EMS in a ZTNA deployment?
Exhibit. Which statement is true about the hr endpoint?
Exhibit. Which port group membership should you enable on FortiNAC to isolate rogue hosts'?
Exhibit. An administrator has to provide on-fabric clients with access to FortiAnalyzer using ZTNA tags Which two conditions must be met to achieve this task? (Choose two.)
Which statement is true regarding a FortiClient quarantine using FortiAnalyzer playbooks?
What are two functions of NGFW in a ZTA deployment? (Choose two.)

Question 11 - NSE7_ZTA-7.2 discussion

Report
Export

Exhibit.

Which port group membership should you enable on FortiNAC to isolate rogue hosts'?

A.
Forced Authentication
Answers
A.
Forced Authentication
B.
Forced Registration
Answers
B.
Forced Registration
C.
Forced Remediation
Answers
C.
Forced Remediation
D.
Reset Forced Registration
Answers
D.
Reset Forced Registration
Suggested answer: C

Explanation:

In FortiNAC, to isolate rogue hosts, you should enable the:

C) Forced Remediation: This port group membership is used to isolate hosts that have been determined to be non-compliant or potentially harmful. It enforces a remediation process on the devices in this group, often by placing them in a separate VLAN or network segment where they have limited or no access to the rest of the network until they are remediated.

The other options are not specifically designed for isolating rogue hosts:

A) Forced Authentication: This is used to require devices to authenticate before gaining network access.

B) Forced Registration: This group is used to ensure that all devices are registered before they are allowed on the network.

D) Reset Forced Registration: This is used to reset the registration status of devices, not to isolate them.

Show Answer
asked 18/09/2024
James Sutter
33 questions
PreviousPreviousNextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms