Free Fortinet NSE5_FNC_AD_7.6 Exam Questions

Question 1

Refer to the exhibit.An administrator is configuring FortiNAC-F (or the onboarding of guest users. Which IP address would be used for the gateway defined in the DHCP scope?

A : 10.0.1.254

B : 10.0.1.110

C : 10.10.1.250

D : 10.20.1.250

Answer: D

Question 2

An administrator wants to build device profiling rules based on network traffic, but the network session view is not populated with any records. Which two settings can be enabled to gather network session information? (Choose two.)

A : Network traffic polling on any modeled infrastructure device

B : Firewall session polling on modeled FortiGate devices

C : Netflow setting on the FortiNAC-F interfaces

D : Layer 3 polling on the infrastructure devices

Answer: B,C

Question 3

An administrator wants to build device profiling rules based on network traffic, but the network session view is not populated with any records. Which two settings can be enabled to gather network session information? (Choose two.)

A : Network traffic polling on any modeled infrastructure device

B : Firewall session polling on modeled FortiGate devices

C : Netflow setting on the FortiNAC-F interfaces

D : Layer 3 polling on the infrastructure devices

Answer: B,C

Question 4

What must an administrator configure to allow FortiNAC-F to process incoming syslog messages that are not supported by default?

A : A Syslog Service Connector

B : A Security Action

C : A Security Event Parser

D : A Log Receiver

Answer: C

Question 5

An administrator wants to ensure that guest accounts created from this template are not allowed network access outside of the designated times. To achieve this, all necessary configurations must be made to force isolation of hosts in which state?

A : At-risk

B : Disabled

C : Non-authenticated

D : Rogue

Answer: C