Explain and Configure MDM Integration NSE6-FORTINAC-ADMINISTRATOR Practice Questions (Page 4)

Questions 16–19

1. 16application · medium

   A hospital uses FortiNAC to control network access. They have integrated their MDM solution. A doctor's personal smartphone is enrolled in the MDM but is not compliant with the hospital's security policy because it lacks a required passcode. What should FortiNAC do when the device attempts to connect to the network?

   • ABlock the device from all network access until the passcode is set.
   • BAllow the device full network access because it is enrolled in the MDM.
   • CAllow the device to access only the internet, not internal resources.
   • DPlace the device in a quarantine VLAN with limited access until it becomes compliant.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company uses FortiNAC with MDM integration. They want to use the MDM data to automatically assign devices to the correct VLAN based on the device type (e.g., smartphone, tablet, laptop). What is the best way to achieve this?

   • ACreate a device profiling rule that uses MDM device type information.
   • BManually assign each device to a VLAN based on its MAC address.
   • CUse the vendor OUI table to determine the device type.
   • DConfigure the MDM to assign VLANs directly.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the primary purpose of vendor OUI tables in FortiNAC?

   • ATo map MAC address prefixes to device vendors
   • BTo define the security policies applied to each device type
   • CTo store IP-to-MAC address mappings for network discovery
   • DTo list all MAC addresses currently connected to the network
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the first step when configuring MDM integration in FortiNAC?

   • ACreate a connection to the MDM provider using the appropriate credentials and API details
   • BImport the MDM certificate into FortiNAC
   • CDefine compliance policies for MDM-managed devices
   • DEnable synchronization of device information
   Reveal Solution Discussion Select an answer first