Fortinet NSE6_FNC-8.5 - Fortinet NSE 6 - FortiNAC 8.5 Exam

Page:    1 / 6   
Total 30 questions

Which three communication methods are used by the FortiNAC to gather information from, and control, infrastructure devices? (Choose three.)

  • A. SNMP
  • B. RADIUS
  • C. FTP
  • D. CLI
  • E. SMTP


Answer : ABC

Explanation:
Set up SNMP communication with FortiNAC
RADIUS Server that is used by FortiNAC to communicate
FortiNAC can be configured via CLI to use HTTP or HTTPS for OS updates instead of FTP.
Reference:
https://docs.fortinet.com/document/fortinac/8.3.0/administration-guide/28966/snmp https://docs.fortinet.com/document/fortinac/8.8.0/administration-guide/938271/configure-radius-settings https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/e7ebbdaa-cabf-11ea-8b7d-00505692583a/FortiNAC_Deployment_Guide.pdf

Which three circumstances trigger Layer 2 polling of infrastructure devices? (Choose three.)

  • A. A matched security policy
  • B. Scheduled poll timings
  • C. Linkup and Linkdown traps
  • D. Manual polling
  • E. A failed Layer 3 poll


Answer : BCD

How should you configure MAC notification traps on a supported switch?

  • A. Configure them only on ports set as 802.1q trunks
  • B. Configure them on all ports except uplink ports
  • C. Configure them on all ports on the switch
  • D. Configure them only after you configure linkup and linkdown traps


Answer : B

Explanation:
Configure SNMP MAC Notification traps on all access ports (do not include uplinks).
Reference:
https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/be7fcde9-9685-11e9-81a4-00505692583a/
Configuring_Traps_for_MAC_Notification.pdf

Which connecting endpoints are evaluated against all enabled device profiling rules?

  • A. Known trusted devices each time they change location
  • B. Rogues devices, each time they connect
  • C. Rogues devices, only when they connect for the first time
  • D. All hosts, each time they connect


Answer : A

Explanation:
FortiNAC process to classify rogue devices and create an organized inventory of known trusted registered devices.
Reference:
https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/9529d49c-892c-11e9-81a4-00505692583a/
FortiNAC_Device_Profiler_Configuration.pdf

What agent is required in order to detect an added USB drive?

  • A. Mobile
  • B. Passive
  • C. Dissolvable
  • D. Persistent


Answer : D

Explanation:
Expand the Persistent Agent folder. Select USB Detection from the tree.
Reference:
https://docs.fortinet.com/document/fortinac/8.5.2/administration-guide/814147/usb-detection

Page:    1 / 6   
Total 30 questions