Fortinet NSE 6 Network Security Specialist NSE6_FNC-8.5 Questions & Answers

• Question 1:

  What would occur if both an unknown (rogue) device and a known (trusted) device simultaneously appeared on a port that is a member of the Forced Registration port group?

  A. The port would be provisioned to the registration network, and both hosts would be isolated.

  B. The port would not be managed, and an event would be generated.

  C. The port would be provisioned for the normal state host, and both hosts would have access to that VLAN.

  D. The port would be administratively shut down.

  Correct Answer: C

• Question 2:

  Where do you look to determine when and why the FortiNAC made an automated network access change?

  A. The Admin Auditing view

  B. The Event view

  C. The Connections view

  D. The Port Changes view

  Correct Answer: B

  Reference: https://docs.fortinet.com/document/fortigate/6.2.3/cookbook/536166/viewing-event-logs

• Question 3:

  In an isolation VLAN, which three services does FortiNAC supply? (Choose three.)

  A. DNS

  B. NTP

  C. SMTP

  D. DHCP

  E. Web

  Correct Answer: ADE

  Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/8bec453a-b24211e9-a989-00505692583a/AdminGuide-860-PDF.pdf

• Question 4:

  How are logical networks assigned to endpoints?

  A. Through Layer 3 polling configurations

  B. Through network access policies

  C. Through FortiGate IPv4 policies

  D. Through device profiling rules

  Correct Answer: C

  Reference: https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/9819/viewing-and-controllingnetwork-risks-via-topology-view

• Question 5:

  Where do you look to determine what network access policy, if any, is being applied to a particular host?

  A. The network access policy configuration

  B. The Port Properties view of the hosts port

  C. The Policy Logs view D. The Policy Details view for the host

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-npoverview

• Question 6:

  Refer to the exhibit.

  

  If you are forcing the registration of unknown (rogue) hosts, and an unknown (rogue) host connects to a port on the switch, what will occur?

  A. No VLAN change is performed.

  B. The host is disabled.

  C. The host is moved to VLAN 111.

  D. The host is moved to a default isolation VLAN.

  Correct Answer: B

  The ability to limit the number of workstations that can connect to specific ports on the switch is managed with Port Security. If these limits are breached, or access from unknown workstations is attempted, the port can do any or all of the following: drop the untrusted data, notify the network administrator, or disable the port.

  Reference: https://www.alliedtelesis.com/sites/default/files/documents/solutions-guides/ lan_protection_solution_reva.pdf

• Question 7:

  Which agent can receive and display messages from FortiNAC to the end user?

  A. Persistent

  B. Passive

  C. MDM

  D. Dissolvable

  Correct Answer: B

  Reference: https://docs.fortinet.com/document/fortinac/8.7.0/administration-guide/594507/agent-packages

• Question 8:

  Which three of the following are components of a security rule? (Choose three.)

  A. Methods

  B. User or host profile

  C. Security String

  D. Trigger

  E. Action

  Correct Answer: ABE

  Reference: https://patents.google.com/patent/US20150200969A1/en

• Question 9:

  What capability do logical networks provide?

  A. VLAN-based inventory reporting

  B. Interactive topology view diagrams

  C. Application of different access values from a single access policy

  D. Autopopulation of device groups based on point of connection

  Correct Answer: A

  NTM also includes reporting utilities such as network and inventory reports. You can generate reports for subnets, switch ports, and VLANs.

  Reference: https://logicalread.com/network-diagram/#.YBk9ZOgzbIU

• Question 10:

  Which two methods can be used to gather a list of installed applications and application details from a host? (Choose two.)

  A. Agent technology

  B. MDM integration

  C. Portal page on-boarding options

  D. Application layer traffic inspection

  Correct Answer: BC

  Reference: https://developer.apple.com/business/documentation/MDM-Protocol-Reference.pdf https://docs.oracle.com/en/middleware/idm/identity-governance/12.2.1.3/omusg/managing-applicationonboarding.html#GUID-4D0D5B18-A6F5-4231-852E-DB0D95AAE2D1