Configure FortiNAC-F Security Policies NSE6-FORTINAC-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company uses FortiNAC-F with multiple FortiGate firewalls. They have a firewall tag 'Compliant' that is assigned to endpoints that pass posture checks. They want to ensure that only compliant endpoints can access a sensitive application. They have created a firewall policy on one FortiGate that allows access to the application for the 'Compliant' tag. What must be done to ensure the same policy applies on all FortiGates?

   • ACreate the same firewall policy on each FortiGate that references the 'Compliant' tag.
   • BUse a user profile that is synchronized across all FortiGates.
   • CEnable Security Fabric integration to automatically replicate the policy.
   • DConfigure a network access policy in FortiNAC-F that applies to all FortiGates.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the main benefit of integrating FortiNAC-F with the Fortinet Security Fabric?

   • AIt allows FortiNAC-F to share context and enable coordinated responses with other Fortinet devices
   • BIt replaces the need for network access policies
   • CIt provides a backup for FortiNAC-F configuration
   • DIt enables FortiNAC-F to manage all Fortinet devices directly
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   An enterprise has FortiNAC-F integrated with the Security Fabric. They have multiple FortiGate firewalls in different locations. They want to ensure that when an endpoint is quarantined in one location, it is also blocked on all other FortiGates. What is the most effective way to achieve this?

   • AConfigure a Security Fabric connector to automatically block the endpoint on all FortiGates.
   • BUse a user profile that is synchronized across all FortiGates.
   • CCreate separate network access policies for each FortiGate to block the endpoint.
   • DUse a firewall tag that is synchronized across all FortiGates via the Security Fabric.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A financial firm uses FortiNAC-F. They have a network access policy that allows all users in the 'Employees' profile to access the internet. They now need to block access to a specific high-risk website for a subset of employees in the 'Contractors' profile, while still allowing them internet access. They also want to ensure that if a contractor's endpoint is found to be non-compliant, they are completely blocked from the network. What is the most efficient way to achieve this?

   • AUse firewall tags to block the high-risk website and rely on the existing policy to block non-compliant endpoints.
   • BCreate a single network access policy for the 'Contractors' profile that denies access to the high-risk website and also blocks non-compliant endpoints.
   • CModify the existing 'Employees' policy to include a deny rule for the high-risk website and a firewall tag for non-compliant endpoints.
   • DCreate a network access policy for the 'Contractors' profile that denies access to the high-risk website, and another policy that assigns a firewall tag to block non-compliant endpoints.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which FortiNAC-F component is used to group users and hosts into categories for policy enforcement?

   • AFirewall tags
   • BNetwork access policies
   • CSecurity Fabric connectors
   • DUser and host profiles
   Reveal Solution Discussion Select an answer first