NSE6_FNC-9.1 Braindumps Real Exam Updated on May 04, 2024 with 49 Questions

Latest NSE6_FNC-9.1 PDF Dumps & Real Tests Free Updated Today

NEW QUESTION # 25
Where should you configure MAC notification traps on a supported switch?

• A. Configure them on all ports on the switch.
• B. Configure them on all ports except uplink ports.
• C. Configure them only on ports set as 802 1g trunks.
• D. Configure them only after you configure linkup and linkdown traps.

Answer: B

NEW QUESTION # 26
Refer to the exhibit, and then answer the question below.

Which host is rogue?

• A. 0
• B. 1
• C. 2
• D. 3

Answer: B

NEW QUESTION # 27
Which two methods can be used to gather a list of installed applications and application details from a host?
(Choose two.)

• A. Application layer traffic inspection
• B. Agent technology
• C. MDM integration
• D. Portal page on-boarding options

Answer: B,C

NEW QUESTION # 28
Refer to the exhibit.

If a host is connected to a port in the Building 1 First Floor Ports group, what must also be true to match this user/host profile?

• A. The host must have a role value of contractor, an installed persistent agent or a security access value of contractor, and be connected between 6 AM and 5 PM.
• B. The host must have a role value of contractor or an installed persistent agent, a security access value of contractor, and be connected between 9 AM and 5 PM.
• C. The host must have a role value of contractor or an installed persistent agent and a security access value of contractor, and be connected between 6 AM and 5 PM.
• D. The host must have a role value of contractor or an installed persistent agent or a security access value of contractor, and be connected between 6 AM and 5 PM.

Answer: D

NEW QUESTION # 29
By default, if after a successful Layer 2 poll, more than 20 endpoints are seen connected on a single switch port simultaneously, what happens to the port?

• A. The port is disabled
• B. The port is switched into the Dead-End VLAN
• C. The port becomes a threshold uplink
• D. The port is added to the Forced Registration group

Answer: C

NEW QUESTION # 30
When FortiNAC passes a firewall tag to FortiGate, what determines the value that is passed?

• A. Logical network
• B. RADIUS group attribute
• C. Security rule
• D. Device profiling rule

Answer: A

NEW QUESTION # 31
Which two device classification options can register a device automatically and transparently to the end user?
(Choose two.)

• A. Dissolvable agent
• B. Device importing
• C. Captive portal
• D. DotlxAuto Registration
• E. MDM integration

Answer: D,E

NEW QUESTION # 32
View the command and output.

What is the state of database replication?

• A. Primary to secondary synchronization failed.
• B. Secondary to primary synchronization was successful.
• C. Secondary to primary synchronization failed.
• D. Primary to secondary database synchronization was successful.

Answer: D

NEW QUESTION # 33
What capability do logical networks provide?

• A. Application of different access values from a single access policy
• B. Interactive topology view diagrams
• C. Point of access-baseautopopulationof device groups'
• D. IVLAN -based inventory reporting

Answer: A

Explanation:
Explanation
Logical Networks allow you to create fewer Network Access Policies than before. (FortiNAC - What's new in FortiNAC 8.5)

NEW QUESTION # 34
Which connecting endpoints are evaluated against all enabled device profiling rules?

• A. Known trusted devices each time they change location
• B. Rogues devices, each time they connect
• C. Rogues devices, only when they connect for the first time
• D. All hosts, each time they connect

Answer: B

Explanation:
Explanation
FortiNAC process to classify rogue devices and create an organized inventory of known trusted registered devices.

NEW QUESTION # 35
Where do you look to determine when and why the FortiNAC made an automated network access change?

• A. The Event view
• B. The Connections view
• C. The Port Changes view
• D. The Admin Auditing view

Answer: C

NEW QUESTION # 36
Which two of the following are required for endpoint compliance monitors? (Choose two.)

• A. Custom scan
• B. Logged on user
• C. Persistent agent
• D. Security rule

Answer: A,C

Explanation:
Explanation
DirectDefense's analysis of FireEye Endpoint attests that the products help meet the HIPAA Security Rule.
In the menu on the left click the + sign next to Endpoint Compliance to open it.

NEW QUESTION # 37
View the command and output shown in the exhibit.

What is the current state of this host?

• A. Registered
• B. Not authenticated
• C. At-Risk
• D. Rogue

Answer: B

NEW QUESTION # 38
What causes a host's state to change to "at risk"?

• A. The logged on user is not found in the Active Directory.
• B. The host is not in the Registered Hosts group.
• C. The host has failed an endpoint compliance policy or admin scan.
• D. The host has been administratively disabled.

Answer: C

Explanation:
Explanation
Failure- Indicates that the host has failed the scan. This option can also be set manually. When the status is set to Failure the host is marked "At Risk" for the selected scan.

NEW QUESTION # 39
When you create a user or host profile; which three criteria can you use? (Choose three.)

• A. Location
• B. Host or user group memberships
• C. Administrative group membership
• D. Host or user attributes
• E. An applied access policy

Answer: A,B,D

Explanation:
Explanation
Fortinac-admin-operations, P. 391

NEW QUESTION # 40
Which group type can have members added directly from the FortiNAC Control Manager?

• A. Port
• B. Administrator
• C. Host
• D. Device

Answer: B

NEW QUESTION # 41
With enforcement for network access policies and at-risk hosts enabled, what will happen if a host matches a network access policy and has a state of "at risk"?

• A. The host is isolated.
• B. The host is administratively disabled.
• C. The host is provisioned based on the network access policy.
• D. The host is provisioned based on the default access defined by the point of connection.

Answer: A

Explanation:
Explanation
https://training.fortinet.com/pluginfile.php/1912463/mod_resource/content/26/FortiNAC_7.2_Study_Guide-Onli
C: Page 327 - moved to the quarantine isolation network

NEW QUESTION # 42
Where do you look to determine which network access policy, if any is being applied to a particular host?

• A. The Connections view
• B. The Policy Logs view
• C. The Port Properties view of the hosts port
• D. The Policy Details view for the host

Answer: D

Explanation:
Explanation
FortiNAC p 382: "Under Network Access Settings - Policy Name - Name of the Network Access Policy that currently applies to the host."

NEW QUESTION # 43
......

NSE6_FNC-9.1 Dumps With 100% Verified Q&As - Pass Guarantee or Full Refund: https://www.testsimulate.com/NSE6_FNC-9.1-study-materials.html