Configure Access Control on FortiNAC-F NSE6-FORTINAC-ADMINISTRATOR Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company wants to use FortiNAC-F to quarantine non-compliant devices. They have a logical network called 'Quarantine' with a VLAN that only allows access to a remediation server. What is the correct way to enforce this?

   • AManually move each non-compliant device to the 'Quarantine' logical network in the inventory.
   • BUse ACL enforcement to block all traffic except to the remediation server.
   • CConfigure the switch port to use the quarantine VLAN for all devices.
   • DCreate a policy that assigns non-compliant devices to the 'Quarantine' logical network.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What happens to a device's access when it is assigned to a specific logical network in FortiNAC-F?

   • AIt receives the access policies associated with that logical network
   • BIt is removed from the host inventory
   • CIt is granted unrestricted access to all network resources
   • DIt is automatically quarantined
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   In FortiNAC-F, which enforcement method is used to restrict traffic at the switch port level based on rules?

   • AVLAN assignment
   • BACL enforcement
   • CPortal authentication
   • DQuarantine
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company uses FortiNAC-F and has a device that is no longer used. The administrator wants to ensure that if the device reconnects, it does not get network access. What is the correct action?

   • AChange the device's logical network to 'Quarantine'.
   • BRemove the device from the host inventory.
   • CDisable the device's switch port.
   • DAdd the device to a blacklist in the firewall.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A company uses FortiNAC-F and wants to implement multi-factor authentication (MFA) for administrative access to the FortiNAC-F management interface. They also want to ensure that only authorized administrators can make changes to access control policies. What is the best way to achieve this?

   • ARestrict administrative access to specific IP addresses and use a VPN.
   • BUse the built-in local administrator accounts and require a strong password.
   • CEnable two-factor authentication on the FortiNAC-F console using a shared secret.
   • DConfigure FortiNAC-F to integrate with an external identity provider that supports MFA, and use role-based access control (RBAC) to limit administrative permissions.
   Reveal Solution Discussion Select an answer first