Fortinet NSE6_FNC-8.5 Free Practice Questions

NEW QUESTION 1
How are logical networks assigned to endpoints?

• A. Through device profiling rules
• B. Through network access policies
• C. Through Layer 3 polling configurations
• D. Through FortiGate IPv4 policies

Answer: D

NEW QUESTION 2
With enforcement for network access policies and at-risk hosts enabled, what will happen if a host matches a network access policy and has a state of "at risk"?

• A. The host is provisioned based on the default access defined by the point of connection.
• B. The host is provisioned based on the network access policy.
• C. The host is isolated.
• D. The host is administratively disabled.

Answer: D

NEW QUESTION 3
Which three of the following are components of a security rule? (Choose three.)

• A. Security String
• B. Methods
• C. Action
• D. User or host profile
• E. Trigger

Answer: ABD

NEW QUESTION 4
Which two methods can be used to gather a list of installed applications and application details from a host? (Choose two)

• A. Portal page on-boarding options
• B. Application layer traffic inspection
• C. Agent technology
• D. MDM integration

Answer: AB

NEW QUESTION 5
What causes a host's state to change to "at risk"?

• A. The host has failed an endpoint compliance policy or admin scan.
• B. The logged on user is not found in the Active Directory.
• C. The host has been administratively disabled.
• D. The host is not in the Registered Hosts group.

Answer: B

NEW QUESTION 6
Which command line shell and scripting language does FortiNAC use for WinRM?

• A. Linux
• B. Bash
• C. DOS
• D. Powershell

Answer: D

NEW QUESTION 7
Which agent is used only as part of a login script?

• A. Mobile
• B. Passive
• C. Persistent
• D. Dissolvable

Answer: C

NEW QUESTION 8
Which two of the following are required for endpoint compliance monitors? (Choose two.)

• A. Persistent agent
• B. Logged on user
• C. Security rule
• D. Custom scan

Answer: CD

NEW QUESTION 9
What would happen if a port was placed in both the Forced Registration and the Forced Remediation port groups?

• A. Only rogue hosts would be impacted.
• B. Both enforcement groups cannot contain the same port.
• C. Only al-risk hosts would be impacted.
• D. Both types of enforcement would be applied.

Answer: A

NEW QUESTION 10
......