Oct-2024 New Version NSE6_FNC-7.2 Certificate & Helpful Exam Dumps is Online
NSE6_FNC-7.2 Free Certification Exam Material with 60 Q&As
Fortinet NSE6_FNC-7.2 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
NEW QUESTION # 28
Which connecting endpoints are evaluated against all enabled device profiling rules?
- A. All hosts, each time they connect
- B. Known trusted devices each time they change location
- C. Rogues devices, only when they connect for the first time
- D. Rogues devices, each time they connect
Answer: D
Explanation:
FortiNAC process to classify rogue devices and create an organized inventory of known trusted registered devices.
NEW QUESTION # 29
What causes a host's state to change to "at risk"?
- A. The host has been administratively disabled.
- B. The host has failed an endpoint compliance policy or admin scan.
- C. The host is not in the Registered Hosts group.
- D. The logged on user is not found in the Active Directory.
Answer: B
Explanation:
Failure - Indicates that the host has failed the scan. This option can also be set manually. When the status is set to Failure the host is marked "At Risk" for the selected scan.
Reference:
p. 244 of the Study Guide, "A state of at-risk indicates the host has failed a scan. This could be a compliance scan or an administrative scan."
NEW QUESTION # 30
View the command and output shown in the exhibit.
What is the current state of this host?
- A. Not authenticated
- B. Registered
- C. At-Risk
- D. Rogue
Answer: D
Explanation:
The exhibit's command and output detail various attributes for a specific host, including the MAC address, connection status, and various other parameters. The status "Connected" and state "Initial" indicate that the host has been detected on the network but has not yet completed any authentication process. The lines "Client Not Authenticated = true" and "Client needs to authenticate = false" suggest that the host has not yet been authenticated. Therefore, the current state of the host is "Not authenticated," since there is a clear indication that the authentication process has not been completed for this host.
NEW QUESTION # 31
View the output.
Examine the communication between a primary FortiNAC (192.168.10.10) and a secondary FortiNAC (192.166.10.110) configured as an HA pair What is the current state of the FortiNAC HA pair?
- A. The primary server Is running and in control.
- B. The secondary server is running and in control.
- C. The database replication failed.
- D. Fallover from the primary server to the secondary server is in progress.
Answer: A
NEW QUESTION # 32
What would happen if a port was placed in both the Forced Registration and the Forced Remediation port groups?
- A. Both enforcement groups cannot contain the same port.
- B. Only rogue hosts would be impacted.
- C. Both types of enforcement would be applied.
- D. Only al-risk hosts would be impacted.
Answer: A
NEW QUESTION # 33
Refer to the exhibit.
If a host is connected to a port in the Building 1 First Floor Ports group, what must also be true to match this user/host profile?
- A. The host must have a role value of contractor or an installed persistent agent and a security access value of contractor, and be connected between 6 AM and 5 PM.
- B. The host must have a role value of contractor or an installed persistent agent, a security access value of contractor, and be connected between 9 AM and 5 PM.
- C. The host must have a role value of contractor, an installed persistent agent or a security access value of contractor, and be connected between 6 AM and 5 PM.
- D. The host must have a role value of contractor or an installed persistent agent or a security access value of contractor, and be connected between 6 AM and 5 PM.
Answer: D
NEW QUESTION # 34
Refer to the exhibit.
Considering the host status of the two hosts connected to the same wired port, what will happen if the port is a member of the Forced Registration port group?
- A. The port will be administratively shut down.
- B. The port will be provisioned for the normal state host, and both hosts will have access to that VLAN.
- C. The port will not be managed, and an event will be generated.
- D. The port will be provisioned to the registration network, and both hosts will be isolated.
Answer: D
Explanation:
The exhibit shows the status of two hosts connected to a wired infrastructure and indicates their respective MAC addresses and the rule name associated with them. When a port is a member of the Forced Registration port group, and multiple hosts with different statuses are connected to that port, FortiNAC will provision the port to the registration network, which is designed to isolate hosts until they are verified or registered. This ensures that unregistered or unauthorized hosts do not gain access to the network. Therefore, both hosts will be isolated in the registration network according to FortiNAC policy for such scenarios.
NEW QUESTION # 35
Where should you configure MAC notification traps on a supported switch?
- A. Configure them only after you configure linkup and linkdown traps.
- B. Configure them on all ports on the switch.
- C. Configure them on all ports except uplink ports.
- D. Configure them only on ports set as 802 1g trunks.
Answer: D
Explanation:
In general, for network switches supporting MAC notification traps, it's advisable to configure these traps on all ports except uplink ports. Uplink ports are used for connecting to other switches or network infrastructure devices and typically don't need MAC notification traps, which are more relevant for end-device connectivity monitoring.
The study guide specifies that MAC notification traps should not be configured on interfaces that are uplinks.
They are the preferred method for learning and updating Layer 2 information and should be used whenever available, but not on uplink interfaces.
NEW QUESTION # 36
With enforcement for network access policies and at-risk hosts enabled, what will happen if a host matches a network access policy and has a state of "at risk"?
- A. The host is isolated.
- B. The host is provisioned based on the network access policy.
- C. The host is provisioned based on the default access defined by the point of connection.
- D. The host is administratively disabled.
Answer: D
NEW QUESTION # 37
In which view would you find who made modifications to a Group?
- A. The Security Events view
- B. The Event Management view
- C. The Alarms view
- D. The Admin Auditing view
Answer: A
NEW QUESTION # 38
Which three communication methods are used by FortiNAC to gather information from and control, infrastructure devices? (Choose three.)
- A. RADIUS
- B. CLI
- C. FTP
- D. SMTP
- E. SNMP
Answer: A,B,E
Explanation:
FortiNAC Study Guide 7.2 | Page 11
FortiNAC uses various methods to communicate with infrastructure devices such as SNMP for discovery and ongoing management, SSH or Telnet through the CLI for tasks related to the infrastructure, and RADIUS for handling specific types of requests
NEW QUESTION # 39
What would happen if a port was placed in both the Forced Registration and the Forced Remediation port groups?
- A. Both enforcement groups cannot contain the same port.
- B. Only rogue hosts would be impacted.
- C. Both types of enforcement would be applied.
- D. Only al-risk hosts would be impacted.
Answer: B
NEW QUESTION # 40
Which system group will force at-risk hosts into the quarantine network, based on point of connection?
- A. Forced Isolation
- B. Forced Remediation
- C. Physical Address Filtering
- D. Forced Quarantine
Answer: B
Explanation:
Forced Quarantine, study guide 7.2 pag 245 and 248
NEW QUESTION # 41
During the on-boarding process through the captive portal, what are two reasons why a host that successfully registered would remain stuck in the Registration VLAN? (Choose two.)
- A. The wrong agent is installed.
- B. The port default VLAN is the same as the Registration VLAN.
- C. Bridging is enabled on the host.
- D. There is another unregistered host on the same port.
Answer: B,D
NEW QUESTION # 42
In an isolation VLAN. which three services does FortiNAC supply? (Choose three.)
- A. Web
- B. DDNS
- C. SMTP
- D. IDHCP
- E. DNTP
Answer: A,B,E
NEW QUESTION # 43
Which connecting endpoints are evaluated against all enabled device profiling rules?
- A. All hosts, each time they connect
- B. Known trusted devices each time they change location
- C. Rogues devices, only when they connect for the first time
- D. Rogues devices, each time they connect
Answer: D
NEW QUESTION # 44
Which three circumstances trigger Layer 2 polling of infrastructure devices? (Choose three.)
- A. A failed Layer 3 poll
- B. Manual polling
- C. A matched security policy
- D. Scheduled poll timings
- E. Linkup and Linkdown traps
Answer: B,D,E
Explanation:
A: Manual Polling: This is when an administrator or network operator initiates a poll manually to gather information or check the status of the network devices. This can be done for immediate troubleshooting or assessment.
B: Scheduled Poll Timings: Network management systems often have the capability to schedule regular polls of devices to check their status or monitor their performance. These scheduled polls can be set at regular intervals (such as every few minutes, hours, or daily) depending on the requirements of the network.
E: Linkup and Linkdown Traps: SNMP (Simple Network Management Protocol) traps, like Linkup and Linkdown, are automated notifications sent from network devices to a management system. A Linkup trap indicates that a particular interface has become active (up), while a Linkdown trap indicates that an interface has become inactive (down). These traps can trigger Layer 2 polling to ascertain the current status of network interfaces and devices.
NEW QUESTION # 45
Refer to the exhibit.
If you are forcing the registration of unknown (rogue) hosts, and an unknown (rogue) host connects to a port on the switch, what occurs?
- A. The host is disabled.
- B. The host is moved to VLAN 111.
- C. No VLAN change is performed.
- D. The host is moved to a default isolation VLAN.
Answer: B
Explanation:
The exhibit shows a configuration panel where VLAN IDs are specified for different states, such as Default, Registration, and Authentication. When forcing the registration of unknown (rogue) hosts, if an unknown host connects to a port on the switch, the FortiNAC system will move the host to the VLAN designated for Registration. In the exhibit, the VLAN ID for Registration is set to 111, hence the host would be moved to VLAN 111 to undergo the registration process.
NEW QUESTION # 46
Which command line shell and scripting language does FortiNAC use for WinRM?
- A. Powershell
- B. DOS
- C. Bash
- D. Linux
Answer: A
Explanation:
Open Windows PowerShell or a command prompt. Run the following command to determine if you already have WinRM over HTTPS configured.
NEW QUESTION # 47
Which two methods can be used to gather a list of installed applications and application details from a host? (Choose two)
- A. Portal page on-boarding options
- B. MDM integration
- C. Agent technology
- D. Application layer traffic inspection
Answer: A,D
NEW QUESTION # 48
How should you configure MAC notification traps on a supported switch?
- A. Configure them on all ports on the switch
- B. Configure them only after you configure linkup and linkdown traps
- C. Configure them on all ports except uplink ports
- D. Configure them only on ports set as 802 1q trunks
Answer: B
NEW QUESTION # 49
When FortiNAC passes a firewall tag to FortiGate, what determines the value that is passed?
- A. Security rule
- B. Device profiling rule
- C. RADIUS group attribute
- D. Logical network
Answer: D
NEW QUESTION # 50
Which agent can receive and display messages from FortiNAC to the end user?
- A. MDM
- B. Dissolvable
- C. Passive
- D. Persistent
Answer: D
NEW QUESTION # 51
......
Get The Important Preparation Guide With NSE6_FNC-7.2 Dumps: https://testking.itexamdownload.com/NSE6_FNC-7.2-valid-questions.html