[May-2025] Exam Sure Pass Fortinet Certification with NSE6_FNC-7.2 exam questions
Real Fortinet NSE6_FNC-7.2 Exam Questions Study Guide
NEW QUESTION # 30
While troubleshooting a network connectivity issue, an administrator determines that a device was being automatically provisioned to an incorrect VLAN.
Where would the administrator look to determine when and why FortiNAC made the network access change?
- A. The Event view
- B. The Connections view
- C. The Admin Auditing view
- D. The Port Changes view
Answer: D
NEW QUESTION # 31
By default, if more than 20 hosts are seen connected on a single port simultaneously, what will happen to the port?
- A. The port is added to the Forced Registration group.
- B. The port is disabled.
- C. The port becomes a threshold uplink.
- D. The port is switched into the Dead-End VLAN.
Answer: D
NEW QUESTION # 32
Which three circumstances trigger Layer 2 polling of infrastructure devices? (Choose three.)
- A. A matched security policy
- B. A failed Layer 3 poll
- C. Linkup and Linkdown traps
- D. Scheduled poll timings
- E. Manual polling
Answer: B,D
NEW QUESTION # 33
Where should you configure MAC notification traps on a supported switch?
- A. Configure them on all ports on the switch.
- B. Configure them only on ports set as 802 1g trunks.
- C. Configure them only after you configure linkup and linkdown traps.
- D. Configure them on all ports except uplink ports.
Answer: D
NEW QUESTION # 34
In which view would you find who made modifications to a Group?
- A. The Event Management view
- B. The Security Events view
- C. The Alarms view
- D. The Admin Auditing view
Answer: B
NEW QUESTION # 35
During the on-boarding process through the captive portal, what are two reasons why a host that successfully registered would remain stuck in the Registration VLAN? (Choose two.)
- A. The wrong agent is installed.
- B. The port default VLAN is the same as the Registration VLAN.
- C. There is another unregistered host on the same port.
- D. Bridging is enabled on the host.
Answer: B,C
NEW QUESTION # 36
What capability do logical networks provide?
- A. Application of different access values from a single access policy
- B. Point of access-base autopopulation of device groups'
- C. IVLAN -based inventory reporting
- D. Interactive topology view diagrams
Answer: A
Explanation:
Logical Networks allow you to create fewer Network Access Policies than before. (FortiNAC - What's new in FortiNAC 7.2) Logical networks in FortiNAC decouple a policy from a specific access value, allowing for the application of different access values from a single access policy. This is done based on the point of connection, significantly reducing the number of network access policies needed and simplifying network access policy management
NEW QUESTION # 37
What agent is required in order to detect an added USB drive?
- A. Mobile
- B. Dissolvable
- C. Persistent
- D. Passive
Answer: C
Explanation:
Expand the Persistent Agent folder. Select USB Detection from the tree.
Reference:
1. Click System > Settings.
2. Expand the Persistent Agent folder.
3. Select USB Detection from the tree.
4. Click Add or select an existing USB drive and click Modify.
NEW QUESTION # 38
What causes a host's state to change to "at risk"?
- A. The host is not in the Registered Hosts group.
- B. The logged on user is not found in the Active Directory.
- C. The host has failed an endpoint compliance policy or admin scan.
- D. The host has been administratively disabled.
Answer: C
Explanation:
Failure - Indicates that the host has failed the scan. This option can also be set manually. When the status is set to Failure the host is marked "At Risk" for the selected scan.
NEW QUESTION # 39
View the command and output shown in the exhibit.
What is the current state of this host?
- A. Registered
- B. Not authenticated
- C. At-Risk
- D. Rogue
Answer: B
NEW QUESTION # 40
With enforcement for network access policies and at-risk hosts enabled, what will happen if a host matches a network access policy and has a state of "at risk"?
- A. The host is provisioned based on the network access policy.
- B. The host is isolated.
- C. The host is provisioned based on the default access defined by the point of connection.
- D. The host is administratively disabled.
Answer: D
NEW QUESTION # 41
How should you configure MAC notification traps on a supported switch?
- A. Configure them on all ports except uplink ports
- B. Configure them on all ports on the switch
- C. Configure them only on ports set as 802 1q trunks
- D. Configure them only after you configure linkup and linkdown traps
Answer: D
NEW QUESTION # 42
Where are logical network values defined?
- A. In the security and access field of each host record
- B. In the model configuration view of each infrastructure device
- C. On the profiled devices view
- D. In the port properties view of each port
Answer: B
NEW QUESTION # 43
Which two policy types can be created on a FortiNAC Control Manager? (Choose two.)
- A. Supplicant EasvConnect
- B. Endpoint Compliance
- C. Authentication
- D. Network Access
Answer: B,D
NEW QUESTION # 44
Which two device classification options can register a device automatically and transparently to the end user? (Choose two.)
- A. DotlxAuto Registration
- B. Device importing
- C. MDM integration
- D. Dissolvable agent
- E. Captive portal
Answer: A,C
NEW QUESTION # 45
Where do you look to determine which network access policy, if any is being applied to a particular host?
- A. The Port Properties view of the hosts port
- B. The Connections view
- C. The Policy Details view for the host
- D. The Policy Logs view
Answer: C
Explanation:
FortiNAC p 382: "Under Network Access Settings - Policy Name - Name of the Network Access Policy that currently applies to the host."
NEW QUESTION # 46
What would occur if both an unknown (rogue) device and a known (trusted) device simultaneously appeared on a port that is a member of the Forced Registration port group?
- A. The port would be administratively shut down.
- B. The port would be provisioned for the normal state host, and both hosts would have access to that VLAN.
- C. The port would be provisioned to the registration network, and both hosts would be isolated.
- D. The port would not be managed, and an event would be generated.
Answer: C
NEW QUESTION # 47
During the on-boarding process through the captive portal, why would a host that successfully registered remain stuck in the Registration VLAN? (Choose two.)
- A. There is another unregistered host on the same port.
- B. The wrong agent is installed.
- C. The ports default VLAN is the same as the Registration VLAN.
- D. Bridging is enabled on the host
Answer: B,C
NEW QUESTION # 48
What method of communication does FortiNAC use to control VPN host access on FortiGate?
- A. Security Fabric
- B. RSSO
- C. SAMLSSO
- D. RADIUS accounting
Answer: A
NEW QUESTION # 49
......
Updated and Accurate NSE6_FNC-7.2 Questions for passing the exam Quickly: https://examtorrent.dumpsreview.com/NSE6_FNC-7.2-exam-dumps-review.html
