Fortinet nse6-fnc-9-1 practice test

How are logical networks assigned to endpoints?

• A. Through device profiling rules
• B. Through network access policies
• C. Through Layer 3 polling configurations
• D. Through FortiGate IPv4 policies

By default, if after a successful Layer 2 poll, more than 20 endpoints are seen connected on a single
switch port simultaneously, what happens to the port?

• A. The port becomes a threshold uplink
• B. The port is disabled
• C. The port is added to the Forced Registration group
• D. The port is switched into the Dead-End VLAN

An administrator wants the Host At Risk event to generate an alarm. What is used to achieve this
result?

• A. A security trigger activity
• B. A security filter
• C. An event to alarm mapping
• D. An event to action mapping

Which three communication methods are used by FortiNAC to gather information from and control,
infrastructure devices? (Choose three.)

• A. CLI
• B. SMTP
• C. SNMP
• D. FTP
• E. RADIUS

An administrator is configuring FortiNAC to manage FortiGate VPN users. As part of the
configuration, the administrator must configure a few FortiGate firewall policies.
What is the purpose of the FortiGate firewall policy that applies to unauthorized VPN clients?

• A. To deny access to only the production DNS server
• B. To allow access to only the FortiNAC VPN interface
• C. To allow access to only the production DNS server
• D. To deny access to only the FortiNAC VPN interface

Which two policy types can be created on a FortiNAC Control Manager? (Choose two.)

• A. Authentication
• B. Network Access
• C. Endpoint Compliance
• D. Supplicant EasvConnect

During the on-boarding process through the captive portal, what are two reasons why a host that
successfully registered would remain stuck in the Registration VLAN? (Choose two.)

• A. The wrong agent is installed.
• B. The port default VLAN is the same as the Registration VLAN.
• C. Bridging is enabled on the host.
• D. There is another unregistered host on the same port.

When FortiNAC is managing FortiGate VPN users, why is an endpoint compliance policy necessary?

• A. To confirm installed security software
• B. To validate the VPN user credentials
• C. To designate the required agent type
• D. To validate the VPN client being used

In a wireless integration, what method does FortiNAC use to obtain connecting MAC address
information?

• A. SNMP traps
• B. RADIUS
• C. Endstation traffic monitoring D Link traps

Which two agents can validate endpoint compliance transparently to the end user? (Choose two.)

• A. Dissolvable
• B. Mobile
• C. Passive
• D. Persistent