実際にあるNSE6_FNC-7.2問題集でリアルFortinet問題集PDFを提供しています [2024年08月]
実際のFast2test NSE6_FNC-7.2問題集PDFで100%合格率を保証します
Fortinet NSE6_FNC-7.2 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
| トピック 6 |
|
| トピック 7 |
|
| トピック 8 |
|
質問 # 28
Refer to the exhibit.
What would happen if the highlighted port with connected hosts was placed in both the Forced Registration and Forced Remediation port groups?
- A. Only the higher ranked enforcement group would be applied.
- B. Both types of enforcement would be applied.
- C. Multiple enforcement groups could not contain the same port.
- D. Enforcement would be applied only to rogue hosts.
正解：B
質問 # 29
When FortiNAC passes a firewall tag to FortiGate, what determines the value that is passed?
- A. RADIUS group attribute
- B. Security rule
- C. Device profiling rule
- D. Logical network
正解：D
質問 # 30
By default, if more than 20 hosts are seen connected on a single port simultaneously, what will happen to the port?
- A. The port becomes a threshold uplink.
- B. The port is disabled.
- C. The port is switched into the Dead-End VLAN.
- D. The port is added to the Forced Registration group.
正解：A
解説：
Admin Guide p. 754: Threshold Uplink-The Uplink mode has been set as Dynamic and FortiNAC has determined that the number of MAC addresses on the port exceeds the System Defined Uplink count. All hosts read on this port are ignored.
質問 # 31
Which two agents can validate endpoint compliance transparently to the end user? (Choose two.)
- A. Mobile
- B. Passive
- C. Dissolvable
- D. Persistent
正解：A、D
質問 # 32
When FortiNAC is managing FortiGate VPN users, why is an endpoint compliance policy necessary?
- A. To validate the VPN client being used
- B. To confirm installed security software
- C. To validate the VPN user credentials
- D. To designate the required agent type
正解：B
質問 # 33
With enforcement for network access policies and at-risk hosts enabled, what will happen if a host matches a network access policy and has a state of "at risk"?
- A. The host is provisioned based on the default access defined by the point of connection.
- B. The host is provisioned based on the network access policy.
- C. The host is isolated.
- D. The host is administratively disabled.
正解：D
質問 # 34
Which command line shell and scripting language does FortiNAC use for WinRM?
- A. DOS
- B. Linux
- C. Bash
- D. Powershell
正解：D
解説：
Open Windows PowerShell or a command prompt. Run the following command to determine if you already have WinRM over HTTPS configured.
Reference:
Admin Guide on p. 362, "Matches if the device successfully responds to a WinRM client session request. User name and password credentials are required. If there are multiple credentials, each set of credentials will be attempted to find a potential match. The commands are used to automate interaction with the device. Each command is run via Powershell."
質問 # 35
Which connecting endpoints are evaluated against all enabled device profiling rules?
- A. Known trusted devices each time they change location
- B. Rogues devices, each time they connect
- C. All hosts, each time they connect
- D. Rogues devices, only when they connect for the first time
正解：B
質問 # 36
Refer to the exhibit.
If a host is connected to a port in the Building 1 First Floor Ports group, what must also be true to match this user/host profile?
- A. The host must have a role value of contractor, an installed persistent agent or a security access value of contractor, and be connected between 6 AM and 5 PM.
- B. The host must have a role value of contractor or an installed persistent agent or a security access value of contractor, and be connected between 6 AM and 5 PM.
- C. The host must have a role value of contractor or an installed persistent agent, a security access value of contractor, and be connected between 9 AM and 5 PM.
- D. The host must have a role value of contractor or an installed persistent agent and a security access value of contractor, and be connected between 6 AM and 5 PM.
正解：B
質問 # 37
Where should you configure MAC notification traps on a supported switch?
- A. Configure them only on ports set as 802 1g trunks.
- B. Configure them on all ports except uplink ports.
- C. Configure them on all ports on the switch.
- D. Configure them only after you configure linkup and linkdown traps.
正解：B
質問 # 38
Which two methods can be used to gather a list of installed applications and application details from a host? (Choose two.)
- A. MDM integration
- B. Portal page on-boarding options
- C. Agent technology
- D. Application layer traffic inspection
正解：A、C
質問 # 39
Which two policy types can be created on a FortiNAC Control Manager? (Choose two.)
- A. Supplicant EasvConnect
- B. Endpoint Compliance
- C. Network Access
- D. Authentication
正解：B、C
質問 # 40
Which group type can have members added directly from the FortiNAC Control Manager?
- A. Port
- B. Host
- C. Device
- D. Administrator
正解：D
質問 # 41
During the on-boarding process through the captive portal, what are two reasons why a host that successfully registered would remain stuck in the Registration VLAN? (Choose two.)
- A. The port default VLAN is the same as the Registration VLAN.
- B. Bridging is enabled on the host.
- C. The wrong agent is installed.
- D. There is another unregistered host on the same port.
正解：A、D
質問 # 42
Which agent is used only as part of a login script?
- A. Passive
- B. Dissolvable
- C. Persistent
- D. Mobile
正解：A
解説：
If the logon script runs the logon application in persistent mode, configure your Active Directory server not to run scripts synchronously.
質問 # 43
Which connecting endpoints are evaluated against all enabled device profiling rules?
- A. Known trusted devices each time they change location
- B. Rogues devices, each time they connect
- C. All hosts, each time they connect
- D. Rogues devices, only when they connect for the first time
正解：B
解説：
FortiNAC process to classify rogue devices and create an organized inventory of known trusted registered devices.
質問 # 44
In which view would you find who made modifications to a Group?
- A. The Alarms view
- B. The Admin Auditing view
- C. The Security Events view
- D. The Event Management view
正解：C
質問 # 45
Refer to the exhibit, and then answer the question below.
Which host is rogue?
- A. 0
- B. 1
- C. 2
- D. 3
正解：A
質問 # 46
By default, if more than 20 hosts are seen connected on a single port simultaneously, what will happen to the port?
- A. The port is disabled.
- B. The port becomes a threshold uplink.
- C. The port is switched into the Dead-End VLAN.
- D. The port is added to the Forced Registration group.
正解：C
質問 # 47
During the on-boarding process through the captive portal, why would a host that successfully registered remain stuck in the Registration VLAN? (Choose two.)
- A. There is another unregistered host on the same port.
- B. Bridging is enabled on the host
- C. The ports default VLAN is the same as the Registration VLAN.
- D. The wrong agent is installed.
正解：C、D
質問 # 48
With enforcement for network access policies and at-risk hosts enabled, what will happen if a host matches a network access policy and has a state of "at risk"?
- A. The host is provisioned based on the default access defined by the point of connection.
- B. The host is provisioned based on the network access policy.
- C. The host is administratively disabled.
- D. The host is isolated.
正解：D
解説：
https://training.fortinet.com/pluginfile.php/1912463/mod_resource/content/26/FortiNAC_7.2_Study_Guide-Online.pdf C. Page 327 - moved to the quarantine isolation network
質問 # 49
Where do you look to determine which network access policy, if any is being applied to a particular host?
- A. The Port Properties view of the hosts port
- B. The Policy Logs view
- C. The Policy Details view for the host
- D. The Connections view
正解：C
解説：
FortiNAC p 382: "Under Network Access Settings - Policy Name - Name of the Network Access Policy that currently applies to the host."
質問 # 50
An administrator is configuring FortiNAC to manage FortiGate VPN users. As part of the configuration, the administrator must configure a few FortiGate firewall policies.
What is the purpose of the FortiGate firewall policy that applies to unauthorized VPN clients?
- A. To allow access to only the FortiNAC VPN interface
- B. To allow access to only the production DNS server
- C. To deny access to only the FortiNAC VPN interface
- D. To deny access to only the production DNS server
正解：A
質問 # 51
Which three of the following are components of a security rule? (Choose three.)
- A. Trigger
- B. Methods
- C. User or host profile
- D. Action
- E. Security String
正解：A、C、D
質問 # 52
How should you configure MAC notification traps on a supported switch?
- A. Configure them only on ports set as 802 1q trunks
- B. Configure them on all ports on the switch
- C. Configure them only after you configure linkup and linkdown traps
- D. Configure them on all ports except uplink ports
正解：C
質問 # 53
......
検証済みNSE6_FNC-7.2問題集と解答で最新NSE6_FNC-7.2をダウンロード：https://jp.fast2test.com/NSE6_FNC-7.2-premium-file.html