Configure FortiNAC-F Security Policies NSE6-FORTINAC-ADMINISTRATOR Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company has FortiNAC-F integrated with the Security Fabric. They want to ensure that when an endpoint is quarantined by FortiNAC-F, the FortiGate firewall automatically blocks all traffic from that endpoint. What is required for this to work?

   • AA network access policy that directly modifies the FortiGate firewall rules.
   • BA Security Fabric connector that automatically blocks the endpoint on FortiGate without any additional configuration.
   • CA user profile that is set to 'Quarantine' and synchronized to FortiGate.
   • DA firewall tag that is assigned to the endpoint when it is quarantined, and a firewall policy on FortiGate that references that tag.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary function of a network access policy in FortiNAC-F?

   • ATo manage firmware updates for network devices
   • BTo define the physical topology of the network
   • CTo control endpoint connectivity based on profiles and other criteria
   • DTo encrypt traffic between endpoints and the network
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company uses FortiNAC-F with FortiGate. They have a firewall tag 'Quarantine' that is assigned to endpoints that fail posture checks. They want to ensure that quarantined endpoints can only access a remediation server, not the internet or internal network. What is the most effective way to configure this?

   • AConfigure a Security Fabric connector to automatically allow access to the remediation server.
   • BAssign a user profile to quarantined endpoints that restricts their access.
   • CCreate a network access policy in FortiNAC-F that allows access to the remediation server for the 'Quarantine' tag.
   • DCreate a firewall policy on FortiGate that allows access to the remediation server for the 'Quarantine' tag, and denies all other traffic.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company uses FortiNAC-F. They have a group of employees who work remotely and use personal devices. They want to apply stricter network access policies for these personal devices compared to company-owned devices. What should be configured to differentiate these devices?

   • ACreate user profiles for 'Remote Employees' and 'On-site Employees'.
   • BCreate network access policies for each device type and assign them directly to the devices.
   • CUse firewall tags to differentiate personal and company devices.
   • DCreate host profiles for 'Personal Devices' and 'Company Devices' and assign them to the respective endpoints.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company uses FortiNAC-F. They have a network access policy that allows all users in the 'Employees' profile to access the network. They now need to block a specific user, John, from accessing the network because he is under investigation. They do not want to change the policy for all employees. What is the most efficient way to achieve this?

   • ACreate a new network access policy that denies access for John's user profile and place it before the 'Employees' policy.
   • BRemove John from the 'Employees' profile.
   • CModify the 'Employees' policy to deny access for John.
   • DAssign a firewall tag to John that blocks his access.
   Reveal Solution Discussion Select an answer first