NSE5_FNC_AD_7.6 Exam Training Practice Tests (Fortinet NSE 5

Question 1

When preparing network infrastructure devices for visibility, what are the two main advantages of using MAC notification traps on supported devices instead of link-up and link-down traps? (Choose two.)

A. Faster visibility updates with only a slight increase in processing. B. Overhead on FortiNAC-F and the infrastructure device is reduced. C. MAC notification traps include IP address information. D. Hosts connecting to downstream non-managed hubs are immediately learned.

Correct Answer: B,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

An administrator wants to use FortiNAC-F to prevent internal engineers from accessing specific websites as defined in web filter categories on FortiGate. In addition to a security trigger and associated action, which configuration must also be defined on FortiNAC-F?

A. A user/host profile B. A compliance policy C. A firewall policy D. A profiling method

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 3

Refer to the exhibit.

What will happen to the host of a guest user created from this template if the time of connection is 8:00 PM?

A. The host will be marked as at-risk. B. The host will be administratively disabled. C. The host will be marked as a rogue device. D. The host will be marked as non-authenticated.

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 4

An administrator has configured the DHCP scope for a registration isolation network, but the isolation process isn ' t working.
What is the problem with the configuration?

A. The gateway defined for the scope is incorrect. B. The label uses a system-reserved value. C. The domain name server designation is incorrect. D. The lease pool does not contain a complete subnet.

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 5

Where should you configure MAC notification traps on a supported switch?

A. On all ports except uplink ports B. On all ports on the switch C. Only on ports defined as learned uplinks D. Only on ports that generate linkup and linkdown traps

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 6

Refer to the exhibits.

What would happen if the highlighted port with connected hosts was placed in both the Forced Registration and Forced Remediation port groups?

A. Both types of enforcement would be applied B. Only the higher ranked enforcement group would be applied. C. Enforcement would be applied only to rogue hosts D. Multiple enforcement groups could not contain the same port.

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 7

Which two actions must the administrator perform to allow FortiNAC-F to process incoming syslog messages from an unknown vendor? (Choose two.)

A. The device must be added as a server in the Host view. B. The device must be added as a log receiver in FortiNAC-F. C. The device must have an event parser created for it. D. The device sending the messages must be modeled in the Network Inventory view.

Correct Answer: C,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Fortinet NSE 5 - FortiNAC-F 7.6 Administrator - NSE5_FNC_AD_7.6 Exam Practice Test