Question 1

While deploying FortiNAC-F devices in a 1+1 HA configuration, the administrator has chosen to use the shared IP address option. Which condition must be met for this type of deployment?

Options :

A : The isolation network type is layer 3.

B : There is a direct cable link between FortiNAC-F devices.

C : The primary and secondary administrative interfaces are on the same subnet.

D : The isolation network type is Layer 2.

Answer: C

Question 2

When FortiNAC-F is managing VPN clients connecting through FortiGate, why must the clients run a FortiNAC-F agent?

Options :

A : To transparently update The client IP address upon successful authentication

B : To collect user authentication details

C : To collect the client IP address and MAC address

D : To validate the endpoint policy compliance

Answer: C

Question 3

An administrator has created several device profiling rules and evaluated all existing devices in the database. Some of the devices appear in the profiled devices view because they matched a rule, but they remain unknown and the registration column in the profiled devices view shows " No " . What is the most likely cause?

Options :

A : The confirm device profiling rule option is not enabled.

B : The devices match more than one device profiling rule.

C : The device profiling rule has registration set to manual.

D : The devices have persistent agents installed, and the point of connection has PA optimization enabled.

Answer: C

Question 4

Refer to the exhibits. What would happen if the highlighted port with connected hosts was placed in both the Forced Registration and Forced Remediation port groups?

Options :

A : Both types of enforcement would be applied

B : Enforcement would be applied only to rogue hosts

C : Multiple enforcement groups could not contain the same port.

D : Only the higher ranked enforcement group would be applied.

Answer: A

Question 5

Refer to the exhibit. After a successful layer 2 poll, two hosts were learned on the same port The port is a member of the RoleBased Access and Forced Registration groups. The switch has been configured to leverage a single isolation VLAN. How will FortiNAC-F manage this port?

Options :

A : The port will be provisioned to the isolation network

B : The port will be provisioned for the normal state host, but the second host will have access to only theisolation portal page

C : The port will be provisioned as an uplink to a hub or unmanaged switch.

D : The port will be added to the Access Point Management group

Answer: A

Free NSE6_FNC_AD-7.6 Mock Exam – Practice Online Confidently

Buying Options: