Troubleshoot Network Devices and Device Status NSE6-FORTINAC-ADMINISTRATOR Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which statement best describes the role of visibility views in FortiNAC?

   • AThey are external tools used to visualize network traffic in real time.
   • BThey are configuration files that control which network segments are monitored by FortiNAC.
   • CThey are pre-configured SQL queries that present device and network data from the FortiNAC database in a readable format.
   • DThey are database tables that store raw network packets for forensic analysis.
   Reveal Solution Discussion Select an answer first
2. 12expert · medium

   A security team wants to receive real-time alerts for specific FortiNAC events, such as device quarantine. The administrator has configured syslog forwarding to the SIEM, but the SIEM is not receiving the quarantine events. The administrator has verified that the syslog server is reachable and that the port is correct. What should the administrator do next?

   • ACheck the FortiNAC syslog configuration to ensure that the 'Quarantine' log category is included in the forwarding.
   • BCheck the SIEM's syslog listener configuration to ensure it is accepting logs from FortiNAC.
   • CRestart the FortiNAC syslog service.
   • DCheck the FortiNAC system logs for any syslog forwarding errors.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary purpose of the FortiNAC database?

   • ATo store configuration backups for network devices.
   • BTo store syslog messages from external network devices.
   • CTo store the FortiNAC application code and software updates.
   • DTo store device, user, and network event information collected by FortiNAC.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A user reports that they cannot connect to the network. The administrator checks the FortiNAC visibility views and sees the device is in a 'Quarantined' state. The administrator reviews the logs and finds that the device failed a posture assessment. What should the administrator do to resolve the issue?

   • AManually change the device status to 'Registered' in the FortiNAC database.
   • BDisable the posture assessment policy for the device's user group.
   • CReboot the FortiNAC server to clear the quarantine state.
   • DRemediate the posture issue on the device and then re-run the posture assessment.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An administrator is troubleshooting a device that is not being assigned the correct VLAN. The administrator wants to see the logs of the RADIUS server to understand the authentication and authorization process. Where should the administrator look in FortiNAC to find these logs?

   • AIn the 'Log Viewer' under the 'RADIUS' log category.
   • BIn the 'Visibility Views' under the 'Device Status' section.
   • CIn the 'System Events' log under the 'Server' category.
   • DIn the 'Reports' section under the 'Authentication' report.
   Reveal Solution Discussion Select an answer first