Free Fortinet NSE 6 – FortiNAC 7.2 Exam NSE6_FNC-7.2 Exam Practice Test

An administrator is configuring FortiNAC to manage FortiGate VPN users. As part of the configuration, the administrator must configure a few FortiGate firewall policies.What is the purpose of the FortiGate firewall policy that applies to unauthorized VPN clients?

• To deny access to only the production DNS server
• To allow access to only the FortiNAC VPN interface
• To allow access to only the production DNS server
• To deny access to only the FortiNAC VPN interface

What agent is required in order to detect an added USB drive?

• Persistent
• Dissolvable
• Mobile
• Passive

Which connecting endpoints are evaluated against all enabled device profiling rules?

• All hosts, each time they connect
• Rogues devices, only when they connect for the first time
• Known trusted devices each time they change location
• Rogues devices, each time they connect

Which three of the following are components of a security rule? (Choose three.)

• Security String
• Methods
• Action
• User or host profile
• Trigger

Where are logical network values defined?

• In the model configuration view of each infrastructure device
• In the port properties view of each port
• On the profiled devices view
• In the security and access field of each host record

In which view would you find who made modifications to a Group?

• The Event Management view
• The Security Events view
• The Alarms view
• The Admin Auditing view

Where should you configure MAC notification traps on a supported switch?

• Configure them only after you configure linkup and linkdown traps.
• Configure them on all ports on the switch.
• Configure them only on ports set as 802 1g trunks.
• Configure them on all ports except uplink ports.

How are logical networks assigned to endpoints?

• Through device profiling rules
• Through network access policies
• Through Layer 3 polling configurations
• Through FortiGate IPv4 policies

Which two things must be done to allow FortiNAC to process incoming syslog messages from an unknown vendor? (Choose two.)

• A security event parser must be created for the device.
• The device sending the messages must be modeled in the Network Inventory view.
• The device must be added as a patch management server.
• The device must be added as a log receiver.