Fortinet NSE6_FNC-8.5 Online Practice Questions and Exam Preparation

Fortinet NSE6_FNC-8.5 Online Questions & Answers

• Question 1:

  With enforcement for network access policies and at-risk hosts enabled, what will happen if a host matches a network access policy and has a state of "at risk"?

  A. The host is provisioned based on the network access policy.
  B. The host is provisioned based on the default access defined by the point of connection.
  C. The host is isolated.
  D. The host is administratively disabled.
  A. The host is provisioned based on the network access policy.

  ---

  Reference: https://docs.fortinet.com/document/fortinac/8.6.0/administration-guide/49701/policy-assignment

• Question 2:

  Which command line shell and scripting language does FortiNAC use for WinRM?

  A. Powershell
  B. Bash
  C. Linux
  D. DOS
  A. Powershell

  ---

  Open Windows PowerShell or a command prompt. Run the following command to determine if you already have WinRM over HTTPS configured. Reference: https://docs.fortinet.com/document/fortinac/8.7.0/administration-guide/246310/winrm-device-profile-requirements-and-setup

• Question 3:

  Which connecting endpoints are evaluated against all enabled device profiling rules?

  A. Known trusted devices each time they change location
  B. Rogues devices, each time they connect
  C. Rogues devices, only when they connect for the first time
  D. All hosts, each time they connect
  A. Known trusted devices each time they change location

  ---

  FortiNAC process to classify rogue devices and create an organized inventory of known trusted registered devices.

  Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/9529d49c-892c-11e9-81a4-00505692583a/FortiNAC_Device_Profiler_Configuration.pdf

• Question 4:

  Which two agents can validate endpoint compliance transparently to the end user? (Choose two.)

  A. Persistent
  B. Dissolvable
  C. Mobile
  D. Passive
  A. Persistent
  C. Mobile

  ---

  Mobile agents use the network transparently.

  Reference: https://docs.fortinet.com/document/fortinac/8.3.0/administration-guide/377110/persistent-agent-certificate-validation https://docs.fortinet.com/document/fortinac/8.3.0/administration-guide/377110/persistent-agent-certificate-validation

• Question 5:

  What agent is required in order to detect an added USB drive?

  A. Mobile
  B. Passive
  C. Dissolvable
  D. Persistent
  D. Persistent

  ---

  Expand the Persistent Agent folder. Select USB Detection from the tree.

  Reference: https://docs.fortinet.com/document/fortinac/8.5.2/administration-guide/814147/usb-detection

• Question 6:

  Which two methods can be used to gather a list of installed applications and application details from a host? (Choose two.)

  A. Agent technology
  B. MDM integration
  C. Portal page on-boarding options
  D. Application layer traffic inspection
  B. MDM integration
  C. Portal page on-boarding options

  ---

  Reference: https://developer.apple.com/business/documentation/MDM-Protocol-Reference.pdf https://docs.oracle.com/en/middleware/idm/identity-governance/12.2.1.3/omusg/managing-application-onboarding.html#GUID-4D0D5B18-A6F5-4231-852E-DB0D95AAE2D1

• Question 7:

  In a wireless integration, how does FortiNAC obtain connecting MAC address information?

  A. Link traps
  B. End station traffic monitoring
  C. MAC notification traps
  D. RADIUS
  D. RADIUS

  ---

  Intelligent Access Points (IAPs) and controllers support two methods of RADIUS based authentication: RADIUS MAC authentication and 802.1x authentication.

  Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/9019f7f8-200d-11e9-b6f6-f8bc1258b856/FortiNAC_Wireless_Integration_Overview.pdf

• Question 8:

  What capability do logical networks provide?

  A. VLAN-based inventory reporting
  B. Interactive topology view diagrams
  C. Application of different access values from a single access policy
  D. Autopopulation of device groups based on point of connection
  A. VLAN-based inventory reporting

  ---

  NTM also includes reporting utilities such as network and inventory reports. You can generate reports for subnets, switch ports, and VLANs. Reference: https://logicalread.com/network-diagram/#.YBk9ZOgzbIU

• Question 9:

  Which system group will force at-risk hosts into the quarantine network, based on point of connection?

  A. Forced Quarantine
  B. Forced Remediation
  C. Forced Isolation
  D. Physical Address Filtering
  B. Forced Remediation

  ---

  A remediation plan is established, including a forensic analysis and a reload of the system. Also, users are forced to change their passwords as the system held local user accounts. Reference: https://oit.rice.edu/quarantining-process-used-it-staff-members-introduction

• Question 10:

  What would occur if both an unknown (rogue) device and a known (trusted) device simultaneously appeared on a port that is a member of the Forced Registration port group?

  A. The port would be provisioned to the registration network, and both hosts would be isolated.
  B. The port would not be managed, and an event would be generated.
  C. The port would be provisioned for the normal state host, and both hosts would have access to that VLAN.
  D. The port would be administratively shut down.
  C. The port would be provisioned for the normal state host, and both hosts would have access to that VLAN.