Configure Access Control on FortiNAC-F NSE6-FORTINAC-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company uses FortiNAC-F and has a large number of IoT devices that are added to the inventory automatically. They want to ensure that these devices are assigned to a specific logical network based on their device type. However, some devices are being assigned to the wrong logical network. What is the most likely cause and solution?

   • AThe logical network is not mapped to the correct VLAN. Verify the VLAN mapping.
   • BThe host inventory is not being updated frequently enough. Increase the polling interval.
   • CThe devices are not authenticating properly. Check the authentication logs.
   • DThe device type is not correctly identified, so the policy assigns the wrong logical network. Update the device fingerprinting rules.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In FortiNAC-F, how are devices assigned to a logical network?

   • ABased on the device's IP address only
   • BManually by the network administrator for each device individually
   • CBased on rules that match device attributes such as MAC address, OS, or user role
   • DAutomatically based on the physical switch port the device is connected to
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which FortiNAC-F enforcement method is used to isolate a non-compliant device from the rest of the network while still allowing limited remediation access?

   • AVLAN assignment
   • BACL enforcement
   • CPortal redirection
   • DQuarantine
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company uses FortiNAC-F and has a logical network 'Guests' that is mapped to VLAN 30. They want to allow guests to access the internet but not internal resources. They also want to ensure that guests cannot access other guests' devices. What is the best way to achieve this?

   • AAssign guests to the same logical network as employees but with a quarantine policy.
   • BUse ACL enforcement on the guest VLAN to block all traffic except HTTP/HTTPS, and allow peer-to-peer communication.
   • CConfigure the guest VLAN with a private VLAN or port isolation to prevent peer-to-peer communication, and use a firewall to block internal access.
   • DUse a separate SSID for guests and configure the access point to block client isolation.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   In FortiNAC-F, which type of portal page is used to allow visitors to request temporary network access?

   • ARegistration portal
   • BGuest portal
   • CAuthentication portal
   • DRemediation portal
   Reveal Solution Discussion Select an answer first