Explain and Configure MDM Integration NSE6-FORTINAC-ADMINISTRATOR Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In what way does MDM-provided device data influence access control decisions in FortiNAC?

   • AIt automatically blocks all devices that are not enrolled in MDM
   • BIt replaces the need for user authentication
   • CIt can be used as a condition in access policies to grant or deny network access
   • DIt determines the physical switch port a device connects to
   Reveal Solution Discussion Select an answer first
2. 12expert · medium

   A company has integrated FortiNAC with their MDM. They want to ensure that only devices that are both enrolled and compliant are allowed on the network. However, they also want to allow guests to access the internet without being enrolled. What is the best approach?

   • AUse the same policy for all devices but ignore compliance for guests.
   • BCreate a separate network access policy for guests that does not require MDM compliance.
   • CBlock all devices that are not enrolled in the MDM.
   • DRequire all devices, including guests, to be enrolled in the MDM.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A network administrator is configuring FortiNAC to profile devices. They want to ensure that devices from a new vendor are correctly identified. What is the first step the administrator should take?

   • ACreate a new device profiling rule that matches the vendor name.
   • BEnable the MDM integration to get vendor information.
   • CManually assign the vendor to each device.
   • DAdd the vendor's OUI prefixes to the vendor OUI table.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   After connecting FortiNAC to an MDM provider, what must be enabled to start pulling device information?

   • AVendor OUI table updates
   • BSynchronization of device information
   • CLogging and reporting
   • DNetwork access control policies
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   How does FortiNAC use vendor OUI tables within device profiling rules?

   • ATo block all devices from a specific vendor automatically
   • BTo classify a device based on the vendor identified from its MAC address prefix
   • CTo assign an IP address to a device based on its vendor
   • DTo replace the need for MAC authentication on the network
   Reveal Solution Discussion Select an answer first