Fortinet NSE 6 - FortiNAC 9.1 Sample Questions:

1. When FortiNAC passes a firewall tag to FortiGate, what determines the value that is passed?

A) Device profiling rule
B) Security rule
C) RADIUS group attribute
D) Logical network

2. What would occur if both an unknown (rogue) device and a known (trusted) device simultaneously appeared on a port that is a member of the Forced Registration port group?

A) The port would be provisioned to the registration network, and both hosts would be isolated.
B) The port would be administratively shut down.
C) The port would not be managed, and an event would be generated.
D) The port would be provisioned for the normal state host, and both hosts would have access to that VLAN.

3. In an isolation VLAN which three services does FortiNAC supply? (Choose three.)

A) NTP
B) ISMTP
C) DNS
D) Web
E) DHCP

4. What would happen if a port was placed in both the Forced Registration and the Forced Remediation port groups?

A) Only al-risk hosts would be impacted.
B) Both enforcement groups cannot contain the same port.
C) Only rogue hosts would be impacted.
D) Both types of enforcement would be applied.

5. Which two methods can be used to gather a list of installed applications and application details from a host?
(Choose two.)

A) Portal page on-boarding options
B) Application layer traffic inspection
C) Agent technology
D) MDM integration

Solutions: