Explain and Configure Device Profiling NSE6-FORTINAC-ADMINISTRATOR Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A security administrator is concerned about rogue devices on the network. They have configured FortiNAC to quarantine any device that is not classified. However, they are worried that a sophisticated attacker could spoof the MAC address of a known device to bypass the quarantine. What additional measure can be taken to mitigate this risk?

   • ARely solely on the MAC address for classification, as it is the most reliable attribute.
   • BDisable the quarantine action for all devices to avoid disrupting legitimate users.
   • CEnable DHCP fingerprinting in the profiling rules to verify the device's OS, in addition to the MAC address.
   • DIncrease the frequency of network scans to detect spoofed devices more quickly.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which attribute is used by FortiNAC to classify a device as known, unknown, or rogue?

   • AThe device's IP address and its subnet mask
   • BThe device's MAC address and its registration status in the FortiNAC database
   • CThe device's operating system and installed applications
   • DThe device's hostname and DNS domain
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   How are endpoint fingerprints used in profiling rules?

   • AThey are used to authenticate users on the device.
   • BThey are used to encrypt communication between the device and FortiNAC.
   • CThey are compared against the attributes of a device to determine its type.
   • DThey are used to assign IP addresses to devices.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is a limitation of manual host registration compared to automated registration?

   • AIt requires a separate license.
   • BIt is time-consuming and prone to human error.
   • CIt cannot be used for devices with static IP addresses.
   • DIt does not allow updating device information.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A FortiNAC server has suffered a hardware failure, and the administrator needs to restore service on a new server. The administrator has a recent backup of the FortiNAC configuration and database. What is the first step in the recovery procedure?

   • AConfigure the network settings on the new server to match the old server.
   • BContact Fortinet support for a new license key.
   • CRestore the backup immediately after the operating system is installed.
   • DInstall the FortiNAC software on the new server with the same version as the backup.
   Reveal Solution Discussion Select an answer first