Free Fortinet NSE 6 – FortiNAC 8.5 Exam NSE6_FNC-8.5 Exam Practice Test

Which three of the following are components of a security rule? (Choose three.)

• Security String
• Methods
• Action
• User or host profile
• Trigger

With enforcement for network access policies and at-risk hosts enabled, what will happen if a host matches a network access policy and has a state of 'at risk'?

• The host is provisioned based on the default access defined by the point of connection.
• The host is provisioned based on the network access policy.
• The host is isolated.
• The host is administratively disabled.

Which system group will force at-risk hosts into the quarantine network, based on point of connection?

• Forced Isolation
• Physical Address Filtering
• Forced Quarantine
• Forced Remediation

During the on-boarding process through the captive portal, why would a host that successfully registered remain stuck in the Registration VLAN? (Choose two.)

• Bridging is enabled on the host
• There is another unregistered host on the same port.
• The ports default VLAN is the same as the Registration VLAN.
• The wrong agent is installed.

Which two of the following are required for endpoint compliance monitors? (Choose two.)

• Persistent agent
• Logged on user
• Security rule
• Custom scan

What would occur if both an unknown (rogue) device and a known (trusted) device simultaneously appeared on a port that is a member of the Forced Registration port group?

• The port would be provisioned for the normal state host, and both hosts would have access to that VLAN.
• The port would not be managed, and an event would be generated.
• The port would be provisioned to the registration network, and both hosts would be isolated.
• The port would be administratively shut down.

When you create a user or host profile, which three criteria can you use? (Choose three.)

• An applied access policy
• Host or user attributes
• Administrative group membership
• Location
• Host or user group memberships

What causes a host's state to change to 'at risk'?

• The host has failed an endpoint compliance policy or admin scan.
• The logged on user is not found in the Active Directory.
• The host has been administratively disabled.
• The host is not in the Registered Hosts group.

What capability do logical networks provide?

• VLAN-based inventory reporting
• Application of different access values from a single access policy
• Autopopulation of device groups based on point of connection
• Interactive topology view diagrams

In a wireless integration, how does FortiNAC obtain connecting MAC address information?

• MAC notification traps
• Link traps
• End station traffic monitoring
• RADIUS