NSE5_FNC_AD-7.6問題集、Fortinet実際の試験問題

質問 1

In a wireless integration, what method does FortiNAC use to obtain connecting MAC address information?

A. Endstation traffic monitoring

B. RADIUS

C. SNMP traps

D. Link traps

正解: B

質問 2

Refer to the exhibit. If a host is connected to a port in the Building 1 First Floor Ports group, what must also be true to match this user/host profile?

A. The host must have a role value of contractor, an installed persistent agent or a security access value of contractor, and be connected between 6 AM and 5 PM.

B. The host must have a role value of contractor or an installed persistent agent and a security access value of contractor, and be connected between 6 AM and 5 PM.

C. The host must have a role value of contractor or an installed persistent agent or a security access value of contractor, and be connected between 6 AM and 5 PM.

D. The host must have a role value of contractor or an installed persistent agent, a security access value of contractor, and be connected between 9 AM and 5 PM.

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 3

In which three ways would deploying a FortiNAC-F Manager into a large environment consisting of several FortiNAC-F CAs simplify management? (Choose three.)

A. Pooled licenses

B. Global authentication security policies

C. Global version control

D. Global visibility

E. Global infrastructure device inventory

正解: A,C,D

解説: (PassTest メンバーにのみ表示されます)

質問 4

Refer to the exhibit. What would FortiNAC-F generate if only one of the security fitters is satisfied?

A. A security event

B. A security alarm

C. A normal event

D. A normal alarm

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 5

Refer to the exhibit. An administrator has configured the DHCP scope for a registration isolation network, but the isolation process isn't working.
What is the problem with the configuration?

A. The gateway defined for the scope is incorrect.

B. The label uses a system-reserved value.

C. The domain name server designation is incorrect.

D. The lease pool does not contain a complete subnet.

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 6

Refer to the exhibit.

After a successful layer 2 poll, two hosts were learned on the same port. The port is a member of the Role-Based Access and Forced Registration groups. The switch has been configured to leverage a single isolation VLAN.
How will FortiNAC-F manage this port?

A. The port will be provisioned for the normal state host, but the second host will have access to only the isolation portal page.

B. The port will be provisioned to the isolation network.

C. The port will be added to the Access Point Management group.

D. The port will be provisioned as an uplink to a hub or unmanaged switch.

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 7

Refer to the exhibit.

When configuring guest access using a network access policy, where would an administrator configure the Guest-VLAN value?

A. In the Guest template

B. In the User/Host profile

C. In the Guest portal configuration

D. In the Model configuration

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 8

An administrator wants FortiNAC-F to return a group of user-defined RADIUS attributes in RADIUS responses.
Which condition must be true to achieve this?

A. RADIUS accounting must be enabled on the FortiNAC-F RADIUS server configuration.

B. The requesting device must support RFC 5176.

C. Inbound RADIUS requests must contain the Calling-Station-ID attribute.

D. The device models in the inventory view must be configured for proxy-based authentication.

正解: C

解説: (PassTest メンバーにのみ表示されます)

Fortinet NSE 5 - FortiNAC-F 7.6 Administrator - NSE5_FNC_AD-7.6 模擬練習