Free Fortinet NSE5_FNC_AD_7.6 Exam Questions

Question 1

An administrator wants to ensure that guest accounts created from this template are not allowed network access outside of the designated times. To achieve this, all necessary configurations must be made to force isolation of hosts in which state?

A : At-risk

B : Disabled

C : Non-authenticated

D : Rogue

Answer: C

Question 2

An administrator wants to build device profiling rules based on network traffic, but the network session view is not populated with any records. Which two settings can be enabled to gather network session information? (Choose two.)

A : Network traffic polling on any modeled infrastructure device

B : Firewall session polling on modeled FortiGate devices

C : Netflow setting on the FortiNAC-F interfaces

D : Layer 3 polling on the infrastructure devices

Answer: B,C

Question 3

An administrator wants to build device profiling rules based on network traffic, but the network session view is not populated with any records. Which two settings can be enabled to gather network session information? (Choose two.)

A : Network traffic polling on any modeled infrastructure device

B : Firewall session polling on modeled FortiGate devices

C : Netflow setting on the FortiNAC-F interfaces

D : Layer 3 polling on the infrastructure devices

Answer: B,C

Question 4

Refer to the exhibit.An administrator is configuring FortiNAC-F (or the onboarding of guest users. Which IP address would be used for the gateway defined in the DHCP scope?

A : 10.0.1.254

B : 10.0.1.110

C : 10.10.1.250

D : 10.20.1.250

Answer: D

Question 5

Refer to the exhibits. What would happen if the highlighted port with connected hosts was placed in both the Forced Registration and Forced Remediation port groups?

A : Both types of enforcement would be applied

B : Enforcement would be applied only to rogue hosts

C : Multiple enforcement groups could not contain the same port.

D : Only the higher ranked enforcement group would be applied.

Answer: D