Fortinet Fortinet Certifications NSE6_FNC-8.5 Questions & Answers

• Question 11:

  With enforcement for network access policies and at-risk hosts enabled, what will happen if a host matches a network access policy and has a state of "at risk"?

  A. The host is provisioned based on the network access policy.

  B. The host is provisioned based on the default access defined by the point of connection.

  C. The host is isolated.

  D. The host is administratively disabled.

  Correct Answer: A

  Reference: https://docs.fortinet.com/document/fortinac/8.6.0/administration-guide/49701/policy-assignment

• Question 12:

  What causes a host's state to change to "at risk"?

  A. The host has been administratively disabled.

  B. The logged on user is not found in the Active Directory.

  C. The host has failed an endpoint compliance policy or admin scan.

  D. The host is not in the Registered Hosts group.

  Correct Answer: C

  Failure ?Indicates that the host has failed the scan. This option can also be set manually. When the status is set to Failure the host is marked";At Ris"; for the selected scan.

  Reference: https://docs.fortinet.com/document/fortinac/8.3.0/administration-guide/241168/host-health-andscanning

• Question 13:

  What would happen if a port was placed in both the Forced Registration and the Forced Remediation port groups?

  A. Both enforcement groups cannot contain the same port.

  B. Only at-risk hosts would be impacted.

  C. Only rogue hosts would be impacted.

  D. Both types of enforcement would be applied.

  Correct Answer: A

  Reference: https://docs.fortinet.com/document/fortinac/8.3.0/administration-guide/837785/system-groups

• Question 14:

  When you create a user or host profile; which three criteria can you use? (Choose three.)

  A. An applied access policy

  B. Administrative group membership

  C. Location

  D. Host or user group memberships

  E. Host or user attributes

  Correct Answer: ACE

  Reference: https://docs.fortinet.com/document/fortinac/8.3.0/administration-guide/15797/user-host-profiles

• Question 15:

  Refer to the exhibit, and then answer the question below.

  

  Which host is rogue?

  A. 4

  B. 2

  C. 3

  D. 1

  Correct Answer: C

  Reference: https://docs.fortinet.com/document/fortinac/8.6.0/administration-guide/283146/evaluatingrogue-hosts

• Question 16:

  Where are logical network values defined?

  A. On the profiled devices view

  B. In the port properties view of each port

  C. In the model configuration view of each infrastructure device

  D. In the security and access field of each host record

  Correct Answer: D

  Reference: https://www.sciencedirect.com/topics/computer-science/logical-network

• Question 17:

  Which command line shell and scripting language does FortiNAC use for WinRM?

  A. Powershell

  B. Bash

  C. Linux

  D. DOS

  Correct Answer: A

  Open Windows PowerShell or a command prompt. Run the following command to determine if you already have WinRM over HTTPS configured.

  Reference: https://docs.fortinet.com/document/fortinac/8.7.0/administration-guide/246310/winrm-deviceprofile-requirements-and-setup

• Question 18:

  Which agent is used only as part of a login script?

  A. Persistent

  B. Passive

  C. Mobile

  D. Dissolvable

  Correct Answer: A

  If the logon script runs the logon application in persistent mode, configure your Active Directory server not to run scripts synchronously.

  Reference: https://www.websense.com/content/support/library/deployctr/v76/ init_setup_creating_and_running_logon_agent_script_deployment_tasks.aspx

• Question 19:

  Which two agents can validate endpoint compliance transparently to the end user? (Choose two.)

  A. Persistent

  B. Dissolvable

  C. Mobile

  D. Passive

  Correct Answer: AC

  Mobile agents use the network transparently.

  Reference: https://docs.fortinet.com/document/fortinac/8.3.0/administration-guide/377110/persistent-agent-certificatevalidation https://docs.fortinet.com/document/fortinac/8.3.0/administration-guide/377110/persistent-agent-certificatevalidation

• Question 20:

  In which view would you find who made modifications to a Group?

  A. The Admin Auditing view

  B. The Alarms view

  C. The Event Management view

  D. The Security Events view

  Correct Answer: A

  It's important to audit Group Policy changes in order to determine the details of changes made to Group Policies by delegated users.

  Reference: https://www.lepide.com/how-to/audit-chnages-made-to-group-policy-objects.html