VendorsExamsEnterprise
Support
Request an ExamContact UsFAQ

Fortinet NSE 5 - FortiNAC-F 7.6 Administrator Free Sample Questions

Description

Covers modeling infrastructure devices and isolation networks, configuring security automation and access control, high availability, and third-party and MDM integration.

12 free sample questions125 in the full practice test

Try simulator

NSE5_FNC_AD-7.6 Sample Questions

  1. Question 1

    Advanced

    Concepts and Initial Configuration · Explain isolation networks and the configuration wizard

    A network architect is designing a FortiNAC-F deployment for a large campus environment. The design requires Layer 3 isolation for a specific branch office where the switching infrastructure does not support VLAN changing via SNMP. Which architectural component or configuration is strictly required to facilitate isolation in this specific Layer 3 scenario?

    Answer and explanation

    Correct answer: B

    In a Layer 3 isolation scenario where VLAN switching is not possible or desired at the access edge, Policy-Based Routing (PBR) is used on the gateway. This redirects web traffic from unauthenticated or non-compliant endpoints to the FortiNAC-F Control Server's isolation interface (portal) for registration or remediation.

  2. Question 2

    Intermediate

    Concepts and Initial Configuration · Explain isolation networks and the configuration wizard

    During the initial configuration wizard of a FortiNAC-F appliance, an administrator is configuring the network interfaces. The appliance is deployed as a virtual machine. Which statement correctly describes the requirement for the 'isolation' interface in a standard deployment?

    Answer and explanation

    Correct answer: A

    The isolation interface (often Port 2) on FortiNAC-F is designed to listen for DHCP requests and DNS queries from devices in the isolation VLANs (Registration, Remediation). It serves as the gateway to the captive portal for these isolated devices.

  3. Question 3

    Intermediate

    Concepts and Initial Configuration · Model and organize infrastructure devices

    While modeling a third-party switch in FortiNAC-F using SNMP v3, the device validation fails despite the IP address being reachable. The administrator has verified the username and authentication password are correct. Which other parameter is a common cause for this failure in a high-security environment?

    Answer and explanation

    Correct answer: A

    SNMP v3 supports both Authentication (Auth) and Privacy (Priv/Encryption). In high-security environments, 'AuthPriv' is commonly used. If the Privacy password or algorithm (DES, AES) is mismatched or missing in the FortiNAC device model configuration, validation will fail.

  4. Question 4

    Beginner

    Concepts and Initial Configuration · Model and organize infrastructure devices

    An administrator needs to organize the infrastructure devices in FortiNAC-F to reflect the physical layout of a multi-building campus. Which hierarchy strategy represents the best practice for utilizing Containers and Device Groups?

    Answer and explanation

    Correct answer: C

    Containers are designed to create a hierarchical, tree-like structure representing physical topology or geography. Device Groups are used for logical grouping of devices (often across different containers) to apply bulk configurations or firmware updates.

  5. Question 5

    Intermediate

    Concepts and Initial Configuration · Model and organize infrastructure devices

    True or False: In a FortiNAC-F deployment, the Control Server component is primarily responsible for processing database transactions and generating reports, while the Application Server handles direct interaction with network infrastructure devices.

    Answer and explanation

    Correct answer: B

    This is False. The roles are reversed or combined depending on deployment, but typically the Control Server (or the control function in a combined appliance) handles direct network interactions (SNMP, RADIUS, DHCP) and enforcement. The Application Server (or management function) handles the database, GUI, and reporting. In FortiNAC-F containerized architecture, these services run as containers but the logical separation remains: Control handles the 'edge' interaction.

  6. Question 6

    Beginner

    Concepts and Initial Configuration · Explain isolation networks and the configuration wizard

    A financial institution requires strict network segmentation. They want to ensure that any device failing an endpoint compliance scan is placed into a VLAN that allows access ONLY to the FortiNAC remediation portal and antivirus update servers. Which isolation network type should be configured for this purpose?

    Answer and explanation

    Correct answer: A

    The Remediation VLAN is specifically designed for devices that are known/registered but have failed a health or compliance check. It restricts access to remediation resources (like the portal or update servers) necessary to fix the compliance issue.

Register free for 6 more questions

Or unlock all 125 NSE5_FNC_AD-7.6 questions with explanations, timed mode and flashcards.

Related practice tests

All Fortinet practice exams