Pass Your Exam With 100% Verified NSE6_FNC-8.5 Exam Questions
NSE6_FNC-8.5 Dumps PDF - NSE6_FNC-8.5 Real Exam Questions Answers
What is the cost of Network Security Specialist Fortinet NSE6_FNC-8.5 Professional Exam
- Product version: FortiNAC 8.5
- Type of Questions: Multiple choice (MCQs), multiple answers. Most questions are scenario based.
- Language of Exam: English
- Duration of Exam: 60 minutes
- Passing score: 72%
- No negative marking for wrong answers
- Number of Questions: 30
NEW QUESTION 13
Which two methods can be used to gather a list of installed applications and application details from a host?
(Choose two)
- A. Application layer traffic inspection
- B. MDM integration
- C. Portal page on-boarding options
- D. Agent technology
Answer: A,C
NEW QUESTION 14
In which view would you find who made modifications to a Group?
- A. The Security Events view
- B. The Event Management view
- C. The Alarms view
- D. The Admin Auditing view
Answer: D
Explanation:
It's important to audit Group Policy changes in order to determine the details of changes made to Group Policies by delegated users.
Reference: https://www.lepide.com/how-to/audit-chnages-made-to-group-policy-objects.html
NEW QUESTION 15
When you create a user or host profile, which three criteria can you use? (Choose three.)
- A. Host or user attributes
- B. Location
- C. Administrative group membership
- D. Host or user group memberships
- E. An applied access policy
Answer: B,C,E
NEW QUESTION 16
How should you configure MAC notification traps on a supported switch?
- A. Configure them on all ports except uplink ports
- B. Configure them on all ports on the switch
- C. Configure them only after you configure linkup and linkdown traps
- D. Configure them only on ports set as 802 1q trunks
Answer: C
NEW QUESTION 17
Refer to the exhibit, and then answer the question below.
Which host is rogue?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
NEW QUESTION 18
Where do you look to determine what network access policy, if any, is being applied to a particular host?
- A. The Policy Logs view
- B. The network access policy configuration
- C. The Policy Details view for the host
- D. The Port Properties view of the hosts port
Answer: B
NEW QUESTION 19
Which two methods can be used to gather a list of installed applications and application details from a host? (Choose two.)
- A. MDM integration
- B. Portal page on-boarding options
- C. Agent technology
- D. Application layer traffic inspection
Answer: A,B
Explanation:
Explanation/Reference: https://developer.apple.com/business/documentation/MDM-Protocol-Reference.pdf
https://docs.oracle.com/en/middleware/idm/identity-governance/12.2.1.3/omusg/managing-application- onboarding.html#GUID-4D0D5B18-A6F5-4231-852E-DB0D95AAE2D1
NEW QUESTION 20
What agent is required in order to detect an added USB drive?
- A. Dissolvable
- B. Persistent
- C. Mobile
- D. Passive
Answer: B
Explanation:
Explanation
Expand the Persistent Agent folder. Select USB Detection from the tree.
NEW QUESTION 21
Where do you look to determine when and why the FortiNAC made an automated network access change?
- A. The Connections view
- B. The Port Changes view
- C. The Event view
- D. The Admin Auditing view
Answer: C
NEW QUESTION 22
Where do you look to determine what network access policy, if any, is being applied to a particular host?
- A. The network access policy configuration
- B. The Policy Logs view
- C. The Policy Details view for the host
- D. The Port Properties view of the hosts port
Answer: B
NEW QUESTION 23
In an isolation VLAN, which three services does FortiNAC supply? (Choose three.)
- A. DNS
- B. NTP
- C. DHCP
- D. SMTP
- E. Web
Answer: A,C,E
Explanation:
Explanation/Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/8bec453a-b242-11e9- a989-00505692583a/AdminGuide-860-PDF.pdf
NEW QUESTION 24
What agent is required in order to detect an added USB drive?
- A. Dissolvable
- B. Persistent
- C. Mobile
- D. Passive
Answer: B
NEW QUESTION 25
With enforcement for network access policies and at-risk hosts enabled, what will happen if a host matches a network access policy and has a state of "at risk"?
- A. The host is provisioned based on the network access policy.
- B. The host is isolated.
- C. The host is provisioned based on the default access defined by the point of connection.
- D. The host is administratively disabled.
Answer: A
NEW QUESTION 26
Which three circumstances trigger Layer 2 polling of infrastructure devices? (Choose three.)
- A. Linkup and Linkdown traps
- B. A failed Layer 3 poll
- C. A matched security policy
- D. Manual polling
- E. Scheduled poll timings
Answer: B,E
NEW QUESTION 27
During the on-boarding process through the captive portal, why would a host that successfully registered remain stuck in the Registration VLAN? (Choose two.)
- A. Bridging is enabled on the host.
- B. The ports default VLAN is the same as the Registration VLAN.
- C. There is another unregistered host on the same port.
- D. The wrong agent is installed.
Answer: B,D
Explanation:
Scenario 4: NAT detection disabled, using endpoint compliance policy and agent.
Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/868f1267-7299-11e9-
81a4-00505692583a/fortinac-admin-operation-85.pdf
NEW QUESTION 28
Which two methods can be used to gather a list of installed applications and application details from a host?
(Choose two)
- A. MDM integration
- B. Portal page on-boarding options
- C. Agent technology
- D. Application layer traffic inspection
Answer: A,B
NEW QUESTION 29
What capability do logical networks provide?
- A. Interactive topology view diagrams
- B. Autopopulation of device groups based on point of connection
- C. VLAN-based inventory reporting
- D. Application of different access values from a single access policy
Answer: C
Explanation:
Explanation
NTM also includes reporting utilities such as network and inventory reports. You can generate reports for subnets, switch ports, and VLANs.
NEW QUESTION 30
......
Exam Topics for Network Security Specialist Fortinet NSE6_FNC-8.5 Professional Exam
The following will be practiced in FORTINET NSE6_FNC-8.5 practice exam and FORTINET NSE6_FNC-8.5 practice tests:
- FortiDDoS
- FortiVoice
- Integrated and Cloud Wireless
- FortiWeb
- FortiADC
- FortiMail
- FortiNAC
- FortiWLC
- FortiAuthenticator
NSE6_FNC-8.5 Dumps 100 Pass Guarantee With Latest Demo: https://www.itexamdownload.com/NSE6_FNC-8.5-valid-questions.html
Prepare NSE6_FNC-8.5 Question Answers Free Update With 100% Exam Passing Guarantee [2021]: https://drive.google.com/open?id=1LzbUcTjgPTuJ5q7cvh2mnHtVfZVMuRTw