NSE6_FNC-7.2: Fortinet NSE 6 - FortiNAC 7.2 Host Practice Questions
The free NSE6_FNC-7.2: Fortinet NSE 6 - FortiNAC 7.2 questions that deal with host, with answers and explanations. The full bank and the timed practice test cover every topic the exam asks about.
Question #2
View the command and output shown in the exhibit. What is the current state of this host?
Correct answer: A
Explanation
The exhibit's command and output detail various attributes for a specific host, including the MAC address, connection status, and various other parameters. The status "Connected" and state "Initial" indicate that the host has been detected on the network but has not yet completed any authentication process. The lines "Client Not Authenticated = true" and "Client needs to authenticate = false" suggest that the host has not yet been authenticated. Therefore, the current state of the host is "Not authenticated," since there is a clear indication that the authentication process has not been completed for this host.
Question #3
What method of communication does FortiNAC use to control VPN host access on FortiGate?
Correct answer: B
Explanation
FortiNAC integrates with FortiGate through the Security Fabric connection, using firewall tags over that fabric link to permit or restrict VPN host traffic. RADIUS accounting only reports session data; it does not enforce access.
Question #5
Which two methods can be used to gather a list of installed applications and application details from a host? (Choose two.)
Select 2 answers.
Correct answer: A, C
Explanation
To gather a list of installed applications and application details from a host, two methods can be used: • Agent technology: FortiNAC uses agent technology to collect all installed applications on an endpoint. • Integration with MDMs (Mobile Device Management systems): MDMs that support application gathering can be integrated with FortiNAC to collect application information. References • FortiNAC 7.2 Study Guide, page 302
Question #7
What causes a host's state to change to "at risk"?
Correct answer: A
Explanation
Failure – Indicates that the host has failed the scan. This option can also be set manually. When the status is set to Failure the host is marked "At Risk" for the selected scan. Reference: https://docs.fortinet.com/document/fortinac/8.3.0/administration-guide/241168/host-health-and-scanning p. 244 of the Study Guide, "A state of at-risk indicates the host has failed a scan. This could be a compliance scan or an administrative scan."
Question #9
Refer to the exhibit. If a host is connected to a port in the Building 1 First Floor Ports group, what must also be true to match this user/host profile?
Correct answer: C
Explanation
Looking at the provided exhibit which shows the Modify User/Host Profile window, the following must be true for a host to match the user/host profile: • The host must be connected to a port within the "Building 1 First Floor Ports" group. • The host must fulfill at least one of the following attributes: • The host must be connected between the specified times of 6 AM and 5 PM on any day of the week. The profile specifies that the host can match the profile by having any one of the listed attributes (Role as Contractor, Persistent Agent installed with specific security & access value), and the time condition must also be met. Therefore, the correct answer is D, which includes "or" conditions for the role value and persistent agent and specifies the correct time frame.
Continue with NSE6_FNC-7.2: Fortinet NSE 6 - FortiNAC 7.2
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in NSE6_FNC-7.2: Fortinet NSE 6 - FortiNAC 7.2, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
All NSE6_FNC-7.2: Fortinet NSE 6 - FortiNAC 7.2 practice questions →