Weekend Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = simple70

Home
Fortinet
NSE 6 Network Security Specialist
NSE6_FNC-7.2
Fortinet NSE 6 - FortiNAC 7.2 Questions and Answers

Pass the Fortinet NSE 6 Network Security Specialist NSE6_FNC-7.2 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam NSE6_FNC-7.2 Premium Access

View all detail and faqs for the NSE6_FNC-7.2 exam

Go to Exam

412 Students Passed

88% Average Score

98% Same Questions

Viewing page 1 out of 2 pages

Viewing questions 1-10 out of questions

Questions # 1:

When FortiNAC is managing VPN clients connecting through FortiGate. why must the clients run a FortiNAC agent?

Options:

To collect user authentication details

To meet the client security profile rule for scanning connecting clients

To collect the client IP address and MAC address

To transparently update the client IP address upon successful authentication

Answer

Questions # 2:

When FortiNAC passes a firewall tag to FortiGate, what determines the value that is passed?

Options:

Security rule

Device profiling rule

RADIUS group attribute

Logical network

Answer

Questions # 3:

Where are logical network values defined?

Options:

In the model configuration view of each infrastructure device

In the port properties view of each port

On the profiled devices view

In the security and access field of each host record

Answer

Explanation

In FortiNAC, logical networks are an integral part of device management and network segmentation. These logical networks are defined and appear within the model configuration of each infrastructure device that is modeled in the topology tree. The configuration allows for the assignment of unique names and, optionally, descriptions to each logical network, thereby clarifying their purpose or use within the network infrastructure.

References: FortiNAC 7.2 Study Guide, Logical Networks Security Fabric and Firewall Tags section.

Questions # 4:

How does FortiGate update FortiNAC about VPN session information?

Options:

API calls to FortiNAC

Syslog messages

SNMP traps

Security Fabric Integration

Answer

Questions # 5:

Which two of the following are required for endpoint compliance monitors? (Choose two.)

Options:

Persistent agent

Logged on user

Security rule

Custom scan

Answer

A, D

Explanation

DirectDefense’s analysis of FireEye Endpoint attests that the products help meet the HIPAA Security Rule.

In the menu on the left click the + sign next to Endpoint Compliance to open it.

[Reference: https://www.fireeye.com/content/dam/fireeye-www/products/pdfs/cg-pci-and-hipaa-compliances.pdf, https://docs.fortinet.com/document/fortinac/7.2.2/administration-guide/92047/add-or-modify-a-scan, ]

Questions # 6:

In which view would you find who made modifications to a Group?

Options:

The Event Management view

The Security Events view

The Alarms view

The Admin Auditing view

Answer

Explanation

It’s important to audit Group Policy changes in order to determine the details of changes made to Group Policies by delegated users.

[Reference: https://www.lepide.com/how-to/audit-chnages-made-to-group-policy-objects.html, ]

Questions # 7:

In a wireless integration, what method does FortiNAC use to obtain connecting MAC address information?

Options:

SNMP traps

RADIUS

Endstation traffic monitoring

D Link traps

Answer

Explanation

In a wireless integration, FortiNAC uses RADIUS to obtain connecting MAC address information. This includes RADIUS requests to FortiNAC and subsequent RADIUS responses from FortiNAC to the requesting device

Questions # 8:

What would happen if a port was placed in both the Forced Registration and the Forced Remediation port groups?

Options:

Only rogue hosts would be impacted.

Both enforcement groups cannot contain the same port.

Only al-risk hosts would be impacted.

Both types of enforcement would be applied.

Answer

Explanation

[Reference: https://docs.fortinet.com/document/fortinac/8.3.0/administration-guide/837785/system-groups, ]

Questions # 9:

Refer to the exhibit.

Question # 9

What would happen if the highlighted port with connected hosts was placed in both the Forced Registration and Forced Remediation port groups?

Options:

Multiple enforcement groups could not contain the same port.

Only the higher ranked enforcement group would be applied.

Both types of enforcement would be applied.

Enforcement would be applied only to rogue hosts.

Answer

Explanation

In systems like FortiNAC, when a port is designated to be in multiple enforcement groups, it is common for only the higher-priority or higher-ranked group's policies to be applied. This is to prevent conflicting enforcement actions from being attempted on the same port. Although the specific details of the priority or ranking system are not provided in the extracted references, the principle of hierarchical policy enforcement suggests that only the policies of the higher-ranked group would be applied to the port.

References

FortiNAC documentation would typically outline this behavior in sections discussing port group enforcement or policy application.

Questions # 10:

What capability do logical networks provide?

Options:

Point of access-base autopopulation of device groups'

Interactive topology view diagrams

Application of different access values from a single access policy

IVLAN -based inventory reporting

Answer

Explanation

Logical Networks allow you to create fewer Network Access Policies than before. (FortiNAC - What's new in FortiNAC 7.2)

Logical networks in FortiNAC decouple a policy from a specific access value, allowing for the application of different access values from a single access policy. This is done based on the point of connection, significantly reducing the number of network access policies needed and simplifying network access policy management

Viewing page 1 out of 2 pages

Viewing questions 1-10 out of questions