Configure FortiGate VPN Integration NSE6-FORTINAC-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   An organization uses FortiNAC to manage network access for both on-premises and VPN users. The VPN users are authenticated via RADIUS against FortiNAC. Recently, VPN users have been unable to authenticate, and the FortiNAC logs show 'RADIUS request timed out' errors. Which configuration change is most likely to resolve this issue?

   • AChange the RADIUS shared secret on the FortiGate only.
   • BMove the FortiNAC server to a different subnet.
   • CIncrease the RADIUS timeout value on the FortiGate.
   • DDisable the FortiNAC firewall policy for RADIUS traffic.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A user disconnects from the VPN by closing the FortiClient application. The administrator expects the session to be removed from FortiNAC immediately. However, the session remains listed as active for several minutes. What is the most likely reason for this delay?

   • AThe FortiGate is configured with a long idle timeout for VPN sessions.
   • BThe FortiNAC agent is still running on the user's endpoint.
   • CFortiNAC is configured to poll the FortiGate for session status at a set interval.
   • DThe user's endpoint is still connected to the corporate Wi-Fi network.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A remote user connects via FortiGate SSL VPN and authenticates successfully. FortiNAC is integrated with the FortiGate. The user's endpoint appears in the FortiNAC portal, but the host is not being assigned the correct role-based access policy. The administrator verifies that the FortiGate is reachable and the API credentials are valid. Which step in the VPN session lifecycle is most likely being skipped, preventing FortiNAC from applying the correct policy?

   • AThe user's account is locked out in the FortiGate's local user database.
   • BThe FortiGate has not yet pushed the updated routing table to the endpoint.
   • CFortiNAC has not received the session establishment notification from the FortiGate via the configured synchronization mechanism.
   • DThe FortiNAC agent on the endpoint has not completed its registration handshake with the NAC.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   An administrator is investigating a report that a VPN user's session was terminated but the user claims they did not disconnect. The FortiNAC logs show a 'session terminated by admin' event. However, no administrator recalls performing this action. Which scenario could explain this event?

   • AAnother administrator terminated the session from the FortiGate's CLI.
   • BThe user's VPN client crashed and reconnected automatically.
   • CThe user's account was locked due to multiple failed login attempts.
   • DThe FortiGate's idle timeout expired for the session.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A company requires that VPN sessions be terminated immediately when a user's endpoint fails a posture check. The posture check is performed by FortiNAC's agent on the endpoint. The FortiNAC is integrated with the FortiGate. Which configuration is necessary to ensure this automatic termination?

   • AConfigure the FortiGate to perform the posture check and terminate the session on failure.
   • BSet up a FortiNAC policy that triggers a session termination action when the posture check fails.
   • CRequire the user to manually reconnect after a posture failure.
   • DEnable the 'terminate on posture failure' option in the FortiGate's VPN settings.
   Reveal Solution Discussion Select an answer first