Which component is part of a device profiling rule's structure?

Conditions that specify attribute values to match.

A list of allowed IP addresses.

A schedule for when the rule is active.

In FortiNAC, what distinguishes a classified device from a rogue device?

A classified device is one that has a static IP address, while a rogue device uses DHCP.

A classified device is one that passes a security posture check, while a rogue device fails it.

A classified device is one that has been manually added, while a rogue device is automatically discovered.

A classified device has been identified and is managed by FortiNAC, while a rogue device is unrecognized or unauthorized.

When would an administrator perform manual host registration in FortiNAC?

When the device is a known server that should be registered automatically.

When automated methods are insufficient, such as for devices that cannot be profiled automatically.

When the device is already registered and no changes are needed.

When the device is a rogue and needs to be blocked.

An administrator is creating a new profiling rule to identify a specific model of IP camera. The camera is known to have a unique TCP port open and a specific MAC address prefix. Which attributes should the administrator use in the profiling rule to ensure the most accurate match?

Use the device's hostname as the matching criterion.

Use only the open TCP port as the matching criterion.

Use the MAC address prefix and the open TCP port as matching criteria.

Use only the MAC address prefix as the matching criterion.

What is automated host registration in FortiNAC?

Devices are added manually by an administrator.

Devices are automatically added to the FortiNAC database based on profiling results.

Devices are added only if they pass a security scan.

Devices are added only after a user authenticates.

FortinetNSE 6 - FortiNAC Administrator

Domain 4Objective 2

Explain and Configure Device Profiling NSE6-FORTINAC-ADMINISTRATOR Practice Questions (Page 4)

Part of the Network Visibility and Monitoring domain, which accounts for 25-35% of the NSE6-FORTINAC-ADMINISTRATOR exam.

29questions here

6free pages

12concepts

25-35%of the exam

Questions 16–20

16foundation · easy
Which component is part of a device profiling rule's structure?
Select an answer first
17foundation · easy
In FortiNAC, what distinguishes a classified device from a rogue device?
Select an answer first
18foundation · easy
When would an administrator perform manual host registration in FortiNAC?
Select an answer first
19application · medium
An administrator is creating a new profiling rule to identify a specific model of IP camera. The camera is known to have a unique TCP port open and a specific MAC address prefix. Which attributes should the administrator use in the profiling rule to ensure the most accurate match?
Select an answer first
20foundation · easy
What is automated host registration in FortiNAC?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE6-FORTINAC-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE6-FORTINAC-ADMINISTRATOR” is a trademark of its owner, used for identification only.