Configure FortiNAC-F Security Policies NSE6-FORTINAC-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   An organization has FortiNAC-F integrated with the Fortinet Security Fabric. They want to use endpoint posture information from FortiNAC-F to dynamically update firewall policies on their FortiGate. What is the primary mechanism that enables this?

   • AFirewall tags that are synchronized from FortiNAC-F to FortiGate and used in firewall policies.
   • BSecurity Fabric connectors that automatically create firewall policies based on endpoint profiles.
   • CUser profiles that are exported to FortiGate and used in firewall policies.
   • DDirect API calls from FortiNAC-F to FortiGate to modify firewall policies in real time.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In FortiNAC-F, what is the primary purpose of a user and host profile?

   • ATo categorize endpoints and users so that policies can be applied based on their attributes
   • BTo store authentication credentials for users and devices
   • CTo log all network traffic generated by a specific endpoint
   • DTo define the network address and subnet for a group of endpoints
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company uses FortiNAC-F with FortiGate firewalls. They want to automatically block a user's network access when their endpoint is found to be running unauthorized software. They have already created a firewall tag called 'Blocked' and linked it to a firewall policy on the FortiGate. What must be configured in FortiNAC-F to ensure the tag is applied to the user's endpoint when the unauthorized software is detected?

   • AA Security Fabric integration that automatically syncs all firewall tags from FortiGate to FortiNAC-F.
   • BA network access policy that assigns the 'Blocked' tag to the user's profile when the unauthorized software is detected.
   • CA host profile that triggers the 'Blocked' tag when the unauthorized software is present.
   • DA user profile that includes the 'Blocked' tag as a static attribute.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the purpose of firewall tags in FortiNAC-F?

   • ATo dynamically update firewall policies based on endpoint posture and behavior
   • BTo permanently assign static IP addresses to endpoints
   • CTo log all firewall events for compliance
   • DTo encrypt traffic between endpoints and the firewall
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A manufacturing company uses FortiNAC-F. They have a set of IoT devices that should only have access to the production network, not the corporate network. They have created a host profile called 'IoT Devices' and assigned it to these devices. What else needs to be configured to enforce this access restriction?

   • AA user profile for the IoT devices that restricts their network access.
   • BA Security Fabric integration that automatically restricts access for IoT devices.
   • CA firewall tag that blocks the IoT devices from the corporate network.
   • DA network access policy that allows the 'IoT Devices' profile to access the production network and denies access to the corporate network.
   Reveal Solution Discussion Select an answer first