Updated Dec-2024 Test Engine to Practice NSE6_FNC-7.2 Dumps & Practice Exam
Dumps Collection NSE6_FNC-7.2 Test Engine Dumps Training With 60 Questions
NEW QUESTION # 30
An administrator wants the Host At Risk event to generate an alarm. What is used to achieve this result?
- A. An event to action mapping
- B. An event to alarm mapping
- C. A security trigger activity
- D. A security filter
Answer: B
Explanation:
To generate an alarm from a Host At Risk event, an administrative user must create an Event to Alarm Mapping for the Vulnerability Scan Failed event. Within this alarm mapping, a host security action must be designated to mark the host at risk
NEW QUESTION # 31
Where do you look to determine which network access policy, if any is being applied to a particular host?
- A. The Policy Details view for the host
- B. The Policy Logs view
- C. The Connections view
- D. The Port Properties view of the hosts port
Answer: A
Explanation:
To determine which network access policy is applied to a particular host, you should look at the Policy Details window. This window provides information about the types of policies applied (such as Network Access, Authentication, Supplicant, etc.), including the profile name, policy name, configuration name, and any settings that make up the configuration.
FortiNAC p 382: "Under Network Access Settings - Policy Name - Name of the Network Access Policy that currently applies to the host."
NEW QUESTION # 32
Where are logical network values defined?
- A. In the model configuration view of each infrastructure device
- B. On the profiled devices view
- C. In the security and access field of each host record
- D. In the port properties view of each port
Answer: A
Explanation:
In FortiNAC, logical networks are an integral part of device management and network segmentation. These logical networks are defined and appear within the model configuration of each infrastructure device that is modeled in the topology tree. The configuration allows for the assignment of unique names and, optionally, descriptions to each logical network, thereby clarifying their purpose or use within the network infrastructure.
References: FortiNAC 7.2 Study Guide, Logical Networks Security Fabric and Firewall Tags section.
NEW QUESTION # 33
In a wireless integration, what method does FortiNAC use to obtain connecting MAC address information?
- A. RADIUS
- B. Endstation traffic monitoring
D Link traps - C. SNMP traps
Answer: A
Explanation:
In a wireless integration, FortiNAC uses RADIUS to obtain connecting MAC address information. This includes RADIUS requests to FortiNAC and subsequent RADIUS responses from FortiNAC to the requesting device
NEW QUESTION # 34
How does FortiGate update FortiNAC about VPN session information?
- A. Security Fabric Integration
- B. Syslog messages
- C. SNMP traps
- D. API calls to FortiNAC
Answer: B
NEW QUESTION # 35
By default, if after a successful Layer 2 poll, more than 20 endpoints are seen connected on a single switch port simultaneously, what happens to the port?
- A. The port is disabled
- B. The port is switched into the Dead-End VLAN
- C. The port becomes a threshold uplink
- D. The port is added to the Forced Registration group
Answer: C
NEW QUESTION # 36
Which command line shell and scripting language does FortiNAC use for WinRM?
- A. Powershell
- B. Linux
- C. DOS
- D. Bash
Answer: A
Explanation:
Open Windows PowerShell or a command prompt. Run the following command to determine if you already have WinRM over HTTPS configured.
NEW QUESTION # 37
In which view would you find who made modifications to a Group?
- A. The Alarms view
- B. The Event Management view
- C. The Admin Auditing view
- D. The Security Events view
Answer: D
NEW QUESTION # 38
What agent is required in order to detect an added USB drive?
- A. Mobile
- B. Persistent
- C. Dissolvable
- D. Passive
Answer: B
Explanation:
Expand the Persistent Agent folder. Select USB Detection from the tree.
Reference:
1. Click System > Settings.
2. Expand the Persistent Agent folder.
3. Select USB Detection from the tree.
4. Click Add or select an existing USB drive and click Modify.
NEW QUESTION # 39
Refer to the exhibit.
What would happen if the highlighted port with connected hosts was placed in both the Forced Registration and Forced Remediation port groups?
- A. Both types of enforcement would be applied.
- B. Only the higher ranked enforcement group would be applied.
- C. Multiple enforcement groups could not contain the same port.
- D. Enforcement would be applied only to rogue hosts.
Answer: A
NEW QUESTION # 40
Refer to the exhibit, and then answer the question below.
Which host is rogue?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A
NEW QUESTION # 41
Where are logical network values defined?
- A. In the model configuration view of each infrastructure device
- B. In the security and access field of each host record
- C. In the port properties view of each port
- D. On the profiled devices view
Answer: D
NEW QUESTION # 42
When FortiNAC is managing VPN clients connecting through FortiGate. why must the clients run a FortiNAC agent?
- A. To meet the client security profile rule for scanning connecting clients
- B. To collect the client IP address and MAC address
- C. To transparently update the client IP address upon successful authentication
- D. To collect user authentication details
Answer: A
NEW QUESTION # 43
What would occur if both an unknown (rogue) device and a known (trusted) device simultaneously appeared on a port that is a member of the Forced Registration port group?
- A. The port would not be managed, and an event would be generated.
- B. The port would be administratively shut down.
- C. The port would be provisioned to the registration network, and both hosts would be isolated.
- D. The port would be provisioned for the normal state host, and both hosts would have access to that VLAN.
Answer: C
Explanation:
When a rogue device connects to a port in the Forced Registration port group, FortiNAC's response is to isolate that device by moving it to a registration captive network. This is part of FortiNAC's state-based control mechanism, where the system acts based on the state of the device (normal, rogue, etc.) and the group or port it is connected to. In this specific scenario, the focus is on the isolation of the rogue device, and the guide does not explicitly detail the simultaneous handling of the normal device.
References: FortiNAC 7.2 Study Guide, State-Based Control section.
NEW QUESTION # 44
What would occur if both an unknown (rogue) device and a known (trusted) device simultaneously appeared on a port that is a member of the Forced Registration port group?
- A. The port would not be managed, and an event would be generated.
- B. The port would be provisioned for the normal state host, and both hosts would have access to that VLAN.
- C. The port would be administratively shut down.
- D. The port would be provisioned to the registration network, and both hosts would be isolated.
Answer: B
NEW QUESTION # 45
......
Fortinet NSE6_FNC-7.2 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
Fortinet NSE6_FNC-7.2 Dumps Cover Real Exam Questions: https://freetorrent.itpass4sure.com/NSE6_FNC-7.2-practice-exam.html
