VCEdump

NSE6_FNC-8.5 Fortinet NSE 6 - FortiNAC 8.5

PDF question preview Back to product

Free preview

5 sample questions

The complete product contains 30 questions.

Question formats

Single choice3

Multiple choice2

Compare study plans

Fortinet · NSE6_FNC-8.5

NSE6_FNC-8.5 questions and answers

Review the question wording, option layout, and available explanations before choosing a study plan.

Question 1

Single choice

By default, if more than 20 hosts are seen connected on a single port simultaneously, what will happen to the port?

A
The port is added to the Forced Registration group.
B
The port is disabled.
C
The port is switched into the Dead-End VLAN.
D
The port becomes a threshold uplink.

Reveal answer details Close answer details

Correct answerB

Question 2

Multiple choice

Which two agents can validate endpoint compliance transparently to the end user? (Choose two.)

A
Persistent
B
Dissolvable
C
Mobile
D
Passive

Reveal answer details Close answer details

Correct answersA, C

Explanation

Mobile agents use the network transparently.

References:
https://docs.fortinet.com/document/fortinac/8.3.0/administration-guide/377110/persistent-agent-certificate-validation
https://docs.fortinet.com/document/fortinac/8.3.0/administration-guide/377110/persistent-agent-certificate-validation

Question 3

Single choice

Refer to the exhibit.

If you are forcing the registration of unknown (rogue) hosts, and an unknown (rogue) host connects to a port on the switch, what will occur?

A
No VLAN change is performed.
B
The host is disabled.
C
The host is moved to VLAN 111.
D
The host is moved to a default isolation VLAN.

Reveal answer details Close answer details

Correct answerB

Explanation

The ability to limit the number of workstations that can connect to specific ports on the switch is managed with Port Security. If these limits are breached, or access from unknown workstations is attempted, the port can do any or all of the following: drop the untrusted data, notify the network administrator, or disable the port.

References:
https://www.alliedtelesis.com/sites/default/files/documents/solutions-guides/
lan_protection_solution_reva.pdf

Question 4

Single choice

What would occur if both an unknown (rogue) device and a known (trusted) device simultaneously appeared on a port that is a member of the Forced Registration port group?

A
The port would be provisioned to the registration network, and both hosts would be isolated.
B
The port would not be managed, and an event would be generated.
C
The port would be provisioned for the normal state host, and both hosts would have access to that VLAN.
D
The port would be administratively shut down.

Reveal answer details Close answer details

Correct answerC

Question 5

Multiple choice

Which two of the following are required for endpoint compliance monitors? (Choose two.)

A
Logged on user
B
Security rule
C
Persistent agent
D
Custom scan

Reveal answer details Close answer details

Correct answersB, D

Explanation

DirectDefense's analysis of FireEye Endpoint attests that the products help meet the HIPAA Security Rule.
In the menu on the left click the + sign next to Endpoint Compliance to open it.

References:
https://www.fireeye.com/content/dam/fireeye-www/products/pdfs/cg-pci-and-hipaa-compliances.pdf
https://docs.fortinet.com/document/fortinac/8.5.2/administration-guide/92047/add-or-modify-a-scan