Free Sales Ending Soon – 100% Valid NSE6_FNC-9.1 Exam Dumps with 49 Questions [Q17-Q40]

Rate this post

Free Sales Ending Soon – 100% Valid NSE6_FNC-9.1 Exam Dumps with 49 Questions

Verified NSE6_FNC-9.1 dumps Q&As on your NSE 6 Network Security Specialist Exam Questions Certain Success!

NO.17 Refer to the exhibit.

If a host is connected to a port in the Building 1 First Floor Ports group, what must also be true to match this user/host profile?

The host must have a role value of contractor, an installed persistent agent or a security access value of contractor, and be connected between 6 AM and 5 PM.

The host must have a role value of contractor or an installed persistent agent, a security access value of contractor, and be connected between 9 AM and 5 PM.

The host must have a role value of contractor or an installed persistent agent and a security access value of contractor, and be connected between 6 AM and 5 PM.

The host must have a role value of contractor or an installed persistent agent or a security access value of contractor, and be connected between 6 AM and 5 PM.

NO.18 What capability do logical networks provide?

Point of access-baseautopopulationof device groups’

Interactive topology view diagrams

Application of different access values from a single access policy

IVLAN -based inventory reporting

Explanation
Logical Networks allow you to create fewer Network Access Policies than before. (FortiNAC – What’s new in FortiNAC 8.5)

NO.19 Which three are components of a security rule? (Choose three.)

Methods

Security String

Trigger

User or host profile

Action

NO.20 Which three of the following are components of a security rule? (Choose three.)

Security String

Methods

Action

User or host profile

Trigger

NO.21 How are logical networks assigned to endpoints?

Through device profiling rules

Through network access policies

Through Layer 3 polling configurations

Through FortiGate IPv4 policies

NO.22 In a wireless integration, what method does FortiNAC use to obtain connecting MAC address information?

SNMP traps

RADIUS

Endstation traffic monitoring
D Link traps

NO.23 Refer to the exhibit.

If you are forcing the registration of unknown (rogue) hosts, and an unknown (rogue) host connects to a port on the switch, what occurs?

The host is moved to VLAN 111.

The host is moved to a default isolation VLAN.

No VLAN change is performed.

The host is disabled.

NO.24 Where do you look to determine when and why the FortiNAC made an automated network access change?

The Event view

The Port Changes view

The Connections view

The Admin Auditing view

NO.25 What agent is required in order to detect an added USB drive?

Persistent

Dissolvable

Mobile

Passive

Explanation
Expand the Persistent Agent folder. Select USB Detection from the tree.

NO.26 What would happen if a port was placed in both the Forced Registration and the Forced Remediation port groups?

Only rogue hosts would be impacted.

Both enforcement groups cannot contain the same port.

Only al-risk hosts would be impacted.

Both types of enforcement would be applied.

NO.27 Which three communication methods are used by FortiNAC to gather information from and control, infrastructure devices? (Choose three.)

FTP

SMTP

CLI

RADIUS

SNMP

Explanation
FortiNAC Study Guide 7.2 | Page 11

NO.28 Which two device classification options can register a device automatically and transparently to the end user?
(Choose two.)

Dissolvable agent

DotlxAuto Registration

Device importing

MDM integration

Captive portal

NO.29 Which three circumstances trigger Layer 2 polling of infrastructure devices? (Choose three.)

Manual polling

Scheduled poll timings

A failed Layer 3 poll

A matched security policy

Linkup and Linkdown traps

NO.30 Which two agents can validate endpoint compliance transparently to the end user? (Choose two.)

Dissolvable

Mobile

Passive

Persistent

NO.31 In an isolation VLAN which three services does FortiNAC supply? (Choose three.)

NTP

DHCP

Web

DNS

ISMTP

NO.32 Refer to the exhibit.

Considering the host status of the two hosts connected to the same wired port, what will happen if the port is a member of the Forced Registration port group?

The port will be provisioned for the normal state host, and both hosts will have access to that VLAN.

The port will not be managed, and an event will be generated.

The port will be provisioned to the registration network, and both hosts will be isolated.

The port will be administratively shut down.

NO.33 When FortiNAC is managing FortiGate VPN users, why is an endpoint compliance policy necessary?

To confirm installed security software

To validate the VPN user credentials

To designate the required agent type

To validate the VPN client beingused

NO.34 By default, if more than 20 hosts are seen connected on a single port simultaneously, what will happen to the port?

The port is switched into the Dead-End VLAN.

The port becomes a threshold uplink.

The port is disabled.

The port is added to the Forced Registration group.

Explanation
Admin Guide p. 754: Threshold Uplink-The Uplink mode has been set as Dynamic and FortiNAC has determined that the number of MAC addresses on the port exceeds the System Defined Uplink count. All hosts read on this port are ignored.

NO.35 While troubleshooting a network connectivity issue, an administrator determines that a device was being automatically provisioned to an incorrect VLAN.
Where would the administrator look to determine when and why FortiNAC made the network access change?

The Event view

The Admin Auditing view

The Port Changes view

The Connections view

Loading …