Free Fortinet NSE 6 – FortiNAC 7.2 Exam NSE6_FNC-7.2 Exam Practice Test

Which two device classification options can register a device automatically and transparently to the end user? (Choose two.)

• Dissolvable agent
• DotlxAuto Registration
• Device importing
• MDM integration
• Captive portal

Which three of the following are components of a security rule? (Choose three.)

• Security String
• Methods
• Action
• User or host profile
• Trigger

Which group type can have members added directly from the FortiNAC Control Manager?

• Administrator
• Device
• Port
• Host

Which agent can receive and display messages from FortiNAC to the end user?

• Dissolvable
• Persistent
• Passive
• MDM

By default, if more than 20 hosts are seen connected on a single port simultaneously, what will happen to the port?

• The port is switched into the Dead-End VLAN.
• The port becomes a threshold uplink.
• The port is disabled.
• The port is added to the Forced Registration group.

Where should you configure MAC notification traps on a supported switch?

• Configure them only after you configure linkup and linkdown traps.
• Configure them on all ports on the switch.
• Configure them only on ports set as 802 1g trunks.
• Configure them on all ports except uplink ports.

With enforcement for network access policies and at-risk hosts enabled, what will happen if a host matches a network access policy and has a state of "at risk"?

• The host is provisioned based on the default access defined by the point of connection.
• The host is provisioned based on the network access policy.
• The host is isolated.
• The host is administratively disabled.

In which view would you find who made modifications to a Group?

• The Event Management view
• The Security Events view
• The Alarms view
• The Admin Auditing view

An administrator is configuring FortiNAC to manage FortiGate VPN users. As part of the configuration, the administrator must configure a few FortiGate firewall policies.What is the purpose of the FortiGate firewall policy that applies to unauthorized VPN clients?

• To deny access to only the production DNS server
• To allow access to only the FortiNAC VPN interface
• To allow access to only the production DNS server
• To deny access to only the FortiNAC VPN interface

What would occur if both an unknown (rogue) device and a known (trusted) device simultaneously appeared on a port that is a member of the Forced Registration port group?

• The port would be provisioned for the normal state host, and both hosts would have access to that VLAN.
• The port would not be managed, and an event would be generated.
• The port would be provisioned to the registration network, and both hosts would be isolated.
• The port would be administratively shut down.