A company has multiple sites and wants to use FortiNAC-F to enforce access control. They have a centralized FortiNAC-F deployment. They want to ensure that devices at each site are assigned to the correct logical network based on their location. What is the best way to achieve this?

Create a single logical network for all sites and use VLANs to differentiate access.

Deploy a separate FortiNAC-F instance at each site.

Create logical networks for each site and use location-based policies to assign devices to the appropriate logical network.

Use host inventory groups to separate devices by site and assign them to the same logical network.

A company wants to allow employees to register their personal devices (BYOD) on the network. They want the device to be automatically added to the inventory and assigned to a 'BYOD' logical network. What is the correct way to configure this?

Create a registration portal page that collects the user's credentials and device information, and configure a policy to add the device to the inventory and assign it to the 'BYOD' logical network.

Use a pre-shared key for BYOD devices and add them to the inventory manually.

Create a guest portal page and have employees use it to register their devices.

Use the default authentication portal and manually add each device to the inventory after authentication.

A company uses FortiNAC-F to control access. They have a requirement that all devices must be authenticated before gaining network access. However, they also have legacy devices that do not support 802.1X. They want to allow these devices to access the network but with limited access. What is the best approach?

Use a pre-shared key for legacy devices and assign them to the employee logical network.

Use MAC authentication bypass (MAB) for legacy devices and assign them to a restricted logical network.

Disable 802.1X on the ports where legacy devices are connected and use portal authentication.

Place legacy devices on a separate VLAN and use ACLs to restrict their access.

A company has multiple departments (HR, Finance, Engineering) and wants to segment their network traffic using FortiNAC-F. They want each department to have its own VLAN and access policies. What is the best way to achieve this?

Create a single logical network with multiple VLANs and use ACLs to restrict traffic between departments.

Assign each department to a different portal page and use the portal to enforce VLAN assignment.

Create a logical network for each department and map each to a separate VLAN, then assign devices to the appropriate logical network.

Use host inventory groups to separate devices and apply ACLs directly on the switch ports.

FortinetNSE 6 - FortiNAC Administrator

Domain 2Objective 2

Configure Access Control on FortiNAC-F NSE6-FORTINAC-ADMINISTRATOR Practice Questions (Page 1)

Part of the Deployment and Provisioning domain, which accounts for 30-40% of the NSE6-FORTINAC-ADMINISTRATOR exam.

24questions here

5free pages

6concepts

30-40%of the exam

Questions 1–5

1expert · hard
A company has multiple sites and wants to use FortiNAC-F to enforce access control. They have a centralized FortiNAC-F deployment. They want to ensure that devices at each site are assigned to the correct logical network based on their location. What is the best way to achieve this?
Select an answer first
2application · medium
A company wants to allow employees to register their personal devices (BYOD) on the network. They want the device to be automatically added to the inventory and assigned to a 'BYOD' logical network. What is the correct way to configure this?
Select an answer first
3expert · hard
A company uses FortiNAC-F to control access. They have a requirement that all devices must be authenticated before gaining network access. However, they also have legacy devices that do not support 802.1X. They want to allow these devices to access the network but with limited access. What is the best approach?
Select an answer first
4application · medium
A company has multiple departments (HR, Finance, Engineering) and wants to segment their network traffic using FortiNAC-F. They want each department to have its own VLAN and access policies. What is the best way to achieve this?
Select an answer first
5foundation · easy
Which FortiNAC-F portal page is used to allow users to authenticate with their existing credentials to gain network access?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE6-FORTINAC-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE6-FORTINAC-ADMINISTRATOR” is a trademark of its owner, used for identification only.

Configure Access Control on FortiNAC-F NSE6-FORTINAC-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

A company has multiple sites and wants to use FortiNAC-F to enforce access control. They have a centralized FortiNAC-F deployment. They want to ensure that devices at each site are assigned to the correct logical network based on their location. What is the best way to achieve this?

A company wants to allow employees to register their personal devices (BYOD) on the network. They want the device to be automatically added to the inventory and assigned to a 'BYOD' logical network. What is the correct way to configure this?

A company has multiple departments (HR, Finance, Engineering) and wants to segment their network traffic using FortiNAC-F. They want each department to have its own VLAN and access policies. What is the best way to achieve this?

Which FortiNAC-F portal page is used to allow users to authenticate with their existing credentials to gain network access?

Keep studying — Deployment and Provisioning