NSE5_FNC_AD-7.6 Exam Training Practice Tests (Fortinet NSE 5

Question 1

Refer to the exhibits. What would happen if the highlighted port with connected hosts was placed in both the Forced Registration and Forced Remediation port groups?

A. Both types of enforcement would be applied B. Only the higher ranked enforcement group would be applied. C. Enforcement would be applied only to rogue hosts D. Multiple enforcement groups could not contain the same port.

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

When working with a FortiNAC-F Manager and cluster management, what will occur when a cluster manager recovers from a non-responsive state?

A. It rejoins the cluster as a worker node B. It will be removed from the cluster and placed in a standalone group C. It will perform a health check and be demoted to standby D. It automatically returns to the manager state

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 3

Refer to the exhibit. A FortiNAC-F N+1 HA configuration is shown.

What will occur if CA-2 fails?

A. CA-1 and CA-3 will operate as a 1+1 HA cluster with CA-3 acting as a hot standby. B. CA-3 will be promoted to a primary and share management responsibilities with CA-1. C. CA-3 will be promoted to a primary and FortiNAC-F manager will load balance between CA-1 and CA-3. D. CA-3 will continue to operate as a secondary in an N+1 HA configuration.

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 4

Where should you configure MAC notification traps on a supported switch?

A. On all ports except uplink ports B. On all ports on the switch C. Only on ports defined as learned uplinks D. Only on ports that generate linkup and linkdown traps

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 5

What must an administrator configure to allow FortiNAC-F to process incoming syslog messages that are not supported by default?

A. A Syslog Service Connector B. A Security Action C. A Security Event Parser D. A Log Receiver

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 6

When creating a device profiling rule, what is an advantage of modeling the endpoint as a device in the inventory view?

A. The device will have historic connection logs B. The devices can have scheduled connection status polling. C. The devices will have connection logs. D. The devices can be associated with a logged on user.

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 7

Which group type can have members added directly from the FortiNAC Control Manager?

A. Host B. Port C. Administrator D. Device

Correct Answer: C

Question 8

Which command line shell and scripting language does FortiNAC use for WinRM?

A. DOS B. Linux C. Bash D. Powershell

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Fortinet NSE 5 - FortiNAC-F 7.6 Administrator - NSE5_FNC_AD-7.6 Exam Practice Test