Configure Access Control on FortiNAC-F NSE6-FORTINAC-ADMINISTRATOR Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A university wants to allow visitors to self-register their devices on the guest network. They need a portal page that collects the visitor's name, email, and device MAC address, and then grants access for 24 hours. What is the correct way to configure this in FortiNAC-F?

   • AUse the default authentication portal and modify the HTML to include extra fields, then set the session timeout to 24 hours.
   • BCreate a captive portal page that requires the visitor to enter a pre-shared key, and configure the key to expire after 24 hours.
   • CCreate a guest portal page with a registration form, and configure a registration policy that assigns the device to the guest logical network with a 24-hour expiration.
   • DCreate a portal page that only asks for the MAC address, and manually add the device to the inventory with a 24-hour access policy.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company uses FortiNAC-F to control access. They have a logical network for 'Contractors' that is assigned a VLAN with limited access. A contractor's device is currently in the 'Employees' logical network. How can the administrator move the device to the 'Contractors' logical network?

   • AChange the VLAN on the switch port where the device is connected.
   • BDelete the device from the inventory and re-add it with the 'Contractors' logical network.
   • CEdit the device's host inventory record and change its logical network assignment to 'Contractors'.
   • DCreate a new portal page for contractors and have the user re-authenticate.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   In FortiNAC-F, what is a logical network?

   • AA physical network segment defined by a VLAN
   • BA collection of switches that are managed together
   • CA set of IP addresses assigned to a specific subnet
   • DA group of devices that share a common set of access policies
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company uses FortiNAC-F with 802.1X authentication. They want to allow employees to authenticate using their Active Directory credentials, but also allow guests to use a portal. What is the correct configuration?

   • ACreate two separate FortiNAC-F instances, one for employees and one for guests.
   • BUse only the portal for both employees and guests, and have employees enter their AD credentials.
   • CConfigure 802.1X for the employee VLAN and a portal page for the guest VLAN, and assign devices to the appropriate logical network based on authentication method.
   • DUse only 802.1X for both employees and guests, and create guest accounts in Active Directory.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the primary benefit of using logical networks in FortiNAC-F?

   • AThey replace the host inventory database
   • BThey allow devices to be grouped for policy enforcement regardless of physical location
   • CThey eliminate the need for VLANs on the network
   • DThey automatically assign IP addresses to devices
   Reveal Solution Discussion Select an answer first