Online Access Free NSE5_FNC_AD_7.6 Exam Questions

An administrator is configuring FortiNAC-F to manage FortiGate VPN users. As part of this configuration, what is the purpose of the FortiGate firewall policy that applies to clients not yet authorized?

• A.To allow access to only the FortiNAC-F VPN interface
• B.To allow access to only the FortiGate VPN interface
• C.To allow access to only the production DNS server
• D.To allow access to only the production DNS server

An organization wants to add a FortiNAC-F Manager to simplify their large FortiNAC-F deployment.
Which two policy types can be managed globally? (Choose two.)

• A.Authentication
• B.Supplicant EasyConnect
• C.Network Access
• D.Endpoint Compliance

Refer to the exhibits.



An administrator is troubleshooting visibility issues on a modeled switch The switch is configured to use link traps and to provision hosts based on network access policies. The administrator is seeing hosts on ports with no hosts connected and not seeing hosts on ports where hosts are known to be connected.
What is the most likely cause?

• A.The logical networks are set to deny.
• B.The host has uninstalled the FortiNAC-F agent.
• C.The switch cannot be contacted by FortiNAC-F
• D.The credentials are incorrect.

When configuring isolation networks in the configuration wizard, why does a layer 3 network typo allow for mora than ono DHCP scope for each isolation network typo?

• A.Any scopes beyond the first scope are used if the initial scope runs out of IP addresses.
• B.There can be more than one isolation network of each type
• C.The layer 3 network type allows for one scope for each possible host status.
• D.Configuring more than one DHCP scope allows for DHCP server redundancy

An administrator wants to control user access to corporate resources by integrating FortiNAC-F with FortiGate using firewall tags defined on FortiNAC-F.
Where would the administrator assign the firewall tag value that will be sent to FortiGate?

• A.RADIUS group attribute
• B.Security rule
• C.Device profiling rule
• D.Logical network