Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
Fortinet
NSE 6 Network Security Specialist
NSE6_FNC-7.2
Fortinet NSE 6 - FortiNAC 7.2 Questions and Answers

Pass the Fortinet NSE 6 Network Security Specialist NSE6_FNC-7.2 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam NSE6_FNC-7.2 Premium Access

View all detail and faqs for the NSE6_FNC-7.2 exam

Go to Exam

710 Students Passed

91% Average Score

90% Same Questions

Viewing page 2 out of 2 pages

Viewing questions 11-20 out of questions

Questions # 11:

During an evaluation of state-based enforcement, an administrator discovers that ports that should not be under enforcement have been added to enforcement groups. In which view would the administrator be able to determine who added the ports to the groups?

Options:

The Alarms view

The Admin Auditing view

The Event Management view

The Security Events view

Answer

Questions # 12:

When FortiNAC is managing FortiGate VPN users, why is an endpoint compliance policy necessary?

Options:

To confirm installed security software

To validate the VPN user credentials

To designate the required agent type

To validate the VPN client being used

Answer

Questions # 13:

What agent is required in order to detect an added USB drive?

Options:

Persistent

Dissolvable

Mobile

Passive

Answer

Explanation

Expand the Persistent Agent folder. Select USB Detection from the tree.

[Reference: https://docs.fortinet.com/document/fortinac/7.2.2/administration-guide/814147/usb-detection, , 1. Click System > Settings., 2. Expand the Persistent Agent folder., 3. Select USB Detection from the tree., 4. Click Add or select an existing USB drive and click Modify., ]

Questions # 14:

Which three circumstances trigger Layer 2 polling of infrastructure devices? (Choose three.)

Options:

Manual polling

Scheduled poll timings

A failed Layer 3 poll

A matched security policy

Linkup and Linkdown traps

Answer

A, B, E

Explanation

A. Manual Polling: This is when an administrator or network operator initiates a poll manually to gather information or check the status of the network devices. This can be done for immediate troubleshooting or assessment.

B. Scheduled Poll Timings: Network management systems often have the capability to schedule regular polls of devices to check their status or monitor their performance. These scheduled polls can be set at regular intervals (such as every few minutes, hours, or daily) depending on the requirements of the network.

E. Linkup and Linkdown Traps: SNMP (Simple Network Management Protocol) traps, like Linkup and Linkdown, are automated notifications sent from network devices to a management system. A Linkup trap indicates that a particular interface has become active (up), while a Linkdown trap indicates that an interface has become inactive (down). These traps can trigger Layer 2 polling to ascertain the current status of network interfaces and devices.

Questions # 15:

Refer to the exhibit.

Question # 15

If a host is connected to a port in the Building 1 First Floor Ports group, what must also be true to match this user/host profile?

Options:

The host must have a role value of contractor, an installed persistent agent or a security access value of contractor, and be connected between 6 AM and 5 PM.

The host must have a role value of contractor or an installed persistent agent, a security access value of contractor, and be connected between 9 AM and 5 PM.

The host must have a role value of contractor or an installed persistent agent and a security access value of contractor, and be connected between 6 AM and 5 PM.

The host must have a role value of contractor or an installed persistent agent or a security access value of contractor, and be connected between 6 AM and 5 PM.

Answer

Explanation

Looking at the provided exhibit which shows the Modify User/Host Profile window, the following must be true for a host to match the user/host profile:

The host must be connected to a port within the "Building 1 First Floor Ports" group.

The host must fulfill at least one of the following attributes:

Have a role value of "Contractor"

Have an installed persistent agent with the security and access value of "Contractor"

The host must be connected between the specified times of 6 AM and 5 PM on any day of the week.

The profile specifies that the host can match the profile by having any one of the listed attributes (Role as Contractor, Persistent Agent installed with specific security & access value), and the time condition must also be met. Therefore, the correct answer is D, which includes "or" conditions for the role value and persistent agent and specifies the correct time frame.

Questions # 16:

Where should you configure MAC notification traps on a supported switch?

Options:

Configure them only after you configure linkup and linkdown traps.

Configure them on all ports on the switch.

Configure them only on ports set as 802 1g trunks.

Configure them on all ports except uplink ports.

Answer

Explanation

In general, for network switches supporting MAC notification traps, it's advisable to configure these traps on all ports except uplink ports. Uplink ports are used for connecting to other switches or network infrastructure devices and typically don't need MAC notification traps, which are more relevant for end-device connectivity monitoring.

The study guide specifies that MAC notification traps should not be configured on interfaces that are uplinks. They are the preferred method for learning and updating Layer 2 information and should be used whenever available, but not on uplink interfaces.

Questions # 17:

Which three communication methods are used by FortiNAC to gather information from and control, infrastructure devices? (Choose three.)

Options:

CLI

SMTP

SNMP

FTP

RADIUS

Answer

A, C, E

Explanation

FortiNAC Study Guide 7.2 | Page 11

FortiNAC uses various methods to communicate with infrastructure devices such as SNMP for discovery and ongoing management, SSH or Telnet through the CLI for tasks related to the infrastructure, and RADIUS for handling specific types of requests

Viewing page 2 out of 2 pages

Viewing questions 11-20 out of questions