NSE5_FNC_AD_7.6問題集、Fortinet実際の試験問題

質問 1

When managing multiple FortiNAC-F CAs with a FortiNAC-F Manager, how is endpoint information updated in the FortiNAC-F Manager database?

A. Endpoint information is updated when an administrator synchronizes with each CA.

B. Endpoint information is pushed to the FortiNAC-F Manager based on an administratively configured scheduled task.

C. Endpoint information is updated in real time when a host status changes.

D. Endpoint information is pulled from the managed CAs by the FortiNAC-F Manager at a set interval.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 2

When creating a device profiling rule, what are two advantages of registering the device in the host view?
(Choose two.)

A. The devices will have connection logs.

B. The devices can be polled for connection status.

C. The devices can be managed as a generic SNMP device.

D. The devices can be associated with a user.

正解: A,D

解説: (PassTest メンバーにのみ表示されます)

質問 3

While deploying FortiNAC-F devices in a 1+1 HA configuration, the administrator has chosen to use the shared IP address option.
Which condition must be met for this type of deployment?

A. The isolation network type is Layer 2.

B. There is a direct cable link between FortiNAC-F devices.

C. The isolation network type is layer 3.

D. The primary and secondary administrative interfaces are on the same subnet.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 4

An administrator has created several device profiling rules and evaluated all existing devices in the database.
Some of the devices appear in the profiled devices view because they matched a rule, but they remain unknown and the registration column in the profiled devices view shows " No " .
What is the most likely cause?

A. The device profiling rule has registration set to manual.

B. The devices match more than one device profiling rule.

C. The devices have persistent agents installed, and the point of connection has PA optimization enabled.

D. The confirm device profiling rule option is not enabled.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 5

In which three ways would deploying a FortiNAC-F Manager into a large environment consisting of several FortiNAC-F CAs simplify management? (Choose three.)

A. Pooled licenses

B. Global authentication security policies

C. Global version control

D. Global visibility

E. Global infrastructure device inventory

正解: A,C,D

解説: (PassTest メンバーにのみ表示されます)

質問 6

Refer to the exhibits.

What would happen if the highlighted port with connected hosts was placed in both the Forced Registration and Forced Remediation port groups?

A. Enforcement would be applied only to rogue hosts

B. Both types of enforcement would be applied

C. Multiple enforcement groups could not contain the same port.

D. Only the higher ranked enforcement group would be applied.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 7

Which two actions must the administrator perform to allow FortiNAC-F to process incoming syslog messages from an unknown vendor? (Choose two.)

A. The device must be added as a server in the Host view.

B. The device must have an event parser created for it.

C. The device sending the messages must be modeled in the Network Inventory view.

D. The device must be added as a log receiver in FortiNAC-F.

正解: B,C

解説: (PassTest メンバーにのみ表示されます)

Fortinet NSE 5 - FortiNAC-F 7.6 Administrator - NSE5_FNC_AD_7.6 模擬練習