[2025] Practice with these NSE6_FNC-7.2 dumps Certification Sample Questions
Get Instant Access of 100% REAL NSE6_FNC-7.2 DUMP Pass Your Exam Easily
Fortinet NSE6_FNC-7.2 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
NEW QUESTION # 25
Which devices would be evaluated by device profiling rules?
- A. Rogue devices, each time they connect
- B. Known trusted devices, each time they change location
- C. Rogue devices, only when they are initially added to the database
- D. All hosts, each time they connect
Answer: D
Explanation:
Device profiling rules in FortiNAC are used to evaluate and classify rogue devices. These rules can be configured to automatically, manually, or through sponsorship evaluate and classify unknown untrusted devices as they are identified and created.
References
* FortiNAC 7.2 Study Guide, page 98
NEW QUESTION # 26
In an isolation VLAN. which three services does FortiNAC supply? (Choose three.)
- A. SMTP
- B. DDNS
- C. Web
- D. IDHCP
- E. DNTP
Answer: B,C,E
NEW QUESTION # 27
Which two agents can validate endpoint compliance transparently to the end user? (Choose two.)
- A. Mobile
- B. Passive
- C. Persistent
- D. Dissolvable
Answer: A,C
NEW QUESTION # 28
Refer to the exhibit.
Considering the host status of the two hosts connected to the same wired port, what will happen if the port is a member of the Forced Registration port group?
- A. The port will be administratively shut down.
- B. The port will not be managed, and an event will be generated.
- C. The port will be provisioned for the normal state host, and both hosts will have access to that VLAN.
- D. The port will be provisioned to the registration network, and both hosts will be isolated.
Answer: D
Explanation:
The exhibit shows the status of two hosts connected to a wired infrastructure and indicates their respective MAC addresses and the rule name associated with them. When a port is a member of the Forced Registration port group, and multiple hosts with different statuses are connected to that port, FortiNAC will provision the port to the registration network, which is designed to isolate hosts until they are verified or registered. This ensures that unregistered or unauthorized hosts do not gain access to the network. Therefore, both hosts will be isolated in the registration network according to FortiNAC policy for such scenarios.
NEW QUESTION # 29
In which view would you find who made modifications to a Group?
- A. The Security Events view
- B. The Alarms view
- C. The Admin Auditing view
- D. The Event Management view
Answer: C
Explanation:
It's important to audit Group Policy changes in order to determine the details of changes made to Group Policies by delegated users.
NEW QUESTION # 30
Refer to the exhibit.
If you are forcing the registration of unknown (rogue) hosts, and an unknown (rogue) host connects to a port on the switch, what occurs?
- A. No VLAN change is performed.
- B. The host is moved to a default isolation VLAN.
- C. The host is disabled.
- D. The host is moved to VLAN 111.
Answer: D
Explanation:
The exhibit shows a configuration panel where VLAN IDs are specified for different states, such as Default, Registration, and Authentication. When forcing the registration of unknown (rogue) hosts, if an unknown host connects to a port on the switch, the FortiNAC system will move the host to the VLAN designated for Registration. In the exhibit, the VLAN ID for Registration is set to 111, hence the host would be moved to VLAN 111 to undergo the registration process.
NEW QUESTION # 31
When you create a user or host profile; which three criteria can you use? (Choose three.)
- A. Host or user attributes
- B. Administrative group membership
- C. Host or user group memberships
- D. An applied access policy
- E. Location
Answer: A,C,E
Explanation:
Fortinac-admin-operations, P. 391
NEW QUESTION # 32
Which agent is used only as part of a login script?
- A. Passive
- B. Persistent
- C. Dissolvable
- D. Mobile
Answer: B
NEW QUESTION # 33
Refer to the exhibit, and then answer the question below.
Which host is rogue?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
NEW QUESTION # 34
Which agent is used only as part of a login script?
- A. Passive
- B. Dissolvable
- C. Mobile
- D. Persistent
Answer: A
Explanation:
If the logon script runs the logon application in persistent mode, configure your Active Directory server not to run scripts synchronously.
NEW QUESTION # 35
Which three are components of a security rule? (Choose three.)
- A. Methods
- B. Security String
- C. Action
- D. User or host profile
- E. Trigger
Answer: C,D,E
Explanation:
Components of a security rule in FortiNAC include:
* Trigger: The condition or event that initiates the evaluation of the rule.
* User or Host Profile: A requirement that can be added to a rule to specify the user or host profile that must be matched.
* Action: The activities or responses that FortiNAC performs when the rule is matched.
References
* FortiNAC 7.2 Study Guide, page 419
NEW QUESTION # 36
Which two of the following are required for endpoint compliance monitors? (Choose two.)
- A. Security rule
- B. Custom scan
- C. Logged on user
- D. Persistent agent
Answer: B,D
Explanation:
DirectDefense's analysis of FireEye Endpoint attests that the products help meet the HIPAA Security Rule.
In the menu on the left click the + sign next to Endpoint Compliance to open it.
NEW QUESTION # 37
What method of communication does FortiNAC use to control VPN host access on FortiGate?
- A. Security Fabric
- B. SAMLSSO
- C. RSSO
- D. RADIUS accounting
Answer: A
NEW QUESTION # 38
What causes a host's state to change to "at risk"?
- A. The logged on user is not found in the Active Directory.
- B. The host is not in the Registered Hosts group.
- C. The host has been administratively disabled.
- D. The host has failed an endpoint compliance policy or admin scan.
Answer: D
Explanation:
Failure - Indicates that the host has failed the scan. This option can also be set manually. When the status is set to Failure the host is marked "At Risk" for the selected scan.
Reference:
p. 244 of the Study Guide, "A state of at-risk indicates the host has failed a scan. This could be a compliance scan or an administrative scan."
NEW QUESTION # 39
Where do you look to determine when and why the FortiNAC made an automated network access change?
- A. The Event view
- B. The Connections view
- C. The Admin Auditing view
- D. The Port Changes view
Answer: D
NEW QUESTION # 40
View the output.
Examine the communication between a primary FortiNAC (192.168.10.10) and a secondary FortiNAC (192.166.10.110) configured as an HA pair What is the current state of the FortiNAC HA pair?
- A. The secondary server is running and in control.
- B. The primary server Is running and in control.
- C. Fallover from the primary server to the secondary server is in progress.
- D. The database replication failed.
Answer: B
NEW QUESTION # 41
Which connecting endpoints are evaluated against all enabled device profiling rules?
- A. Rogues devices, each time they connect
- B. Known trusted devices each time they change location
- C. Rogues devices, only when they connect for the first time
- D. All hosts, each time they connect
Answer: A
NEW QUESTION # 42
By default, if after a successful Layer 2 poll, more than 20 endpoints are seen connected on a single switch port simultaneously, what happens to the port?
- A. The port becomes a threshold uplink
- B. The port is switched into the Dead-End VLAN
- C. The port is disabled
- D. The port is added to the Forced Registration group
Answer: A
Explanation:
If more than 20 endpoints are seen connected on a single switch port simultaneously after a successful Layer 2 poll, the port is designated as an uplink. FortiNAC will ignore all physical addresses learned on an uplink port and will not perform any control operations on it
NEW QUESTION # 43
......
Free Exam Files Downloaded Instantly: https://braindumps.actual4exams.com/NSE6_FNC-7.2-real-braindumps.html