NSE6_FNC_AD-7.6 by Fortinet Actual Free Exam Q&As

Question 1

An administrator is configuring FortiNAC-F to manage FortiGate VPN users. As part of the configuration, the administrator must configure a few FortiGate firewall policies.
What is the purpose of the FortiGate firewall policy that applies to clients not yet authorized by FortiNAC-F?

A. To allow access to only the FortiGate VPN interface B. To allow access to only the production DNS server C. To allow access to only the FortiNAC-F VPN interface D. To allow access to only the production DNS server

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 2

Which two statements are true about integrating a third-party device using SNMP traps from that device as input to generate an event? (Choose two.)

A. set allowaccess snmp must be configured using the CLI on the FortiNAC-F receiving interface. B. The sending device must be modeled in the inventory topology. C. The IP address OID and MAC address OID must be configured in the trap MIB file. D. The sending device must support SNMPv3.

Discussion 0

Correct Answer: B,C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 3

When creating a device profiling rule, what are two advantages of registering the device in the host view? (Choose two.)

A. The devices can be polled for connection status. B. The devices can be associated with a user. C. The devices will have connection logs. D. The devices can be managed as a generic SNMP device.

Discussion 0

Correct Answer: B,C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 4

When preparing network infrastructure devices for visibility, what are the two main advantages of using MAC notification traps on supported devices instead of linkup and linkdown traps? (Choose two.)

A. Faster visibility updates with only a slight increase in processing. B. Overhead on FortiNAC-F and the infrastructure device will be reduced. C. MAC notification traps will include IP address information. D. Hosts connecting to downstream non-managed hubs will be immediately learned.

Discussion 0

Correct Answer: A,D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 5

Refer to the exhibits. Based on the given configurations and settings, on which date and time would a guest account created at 8:00 AM on 2025/09/12 expire?

A. 2025/09/13 at 17:00:00 B. 2025/09/12 at 8:00 PM C. 2025/09/12 at 7:00 PM D. 2025/09/12 at 17:00:00

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 6

While discovering network infrastructure devices, a switch appears in the inventory topology with a question mark (?) on the icon. What would cause this?

A. SNMP is not enabled on the switch. B. The wrong SNMP community string was entered during discovery. C. The SNMP ObjectlD is not recognized by FortiNAC-F. D. A read-only SNMP community siring was used.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 7

When working with a FortiNAC-F Manager and cluster management, what will occur when a cluster manager recovers from a non-responsive state?

A. It rejoins the cluster as a worker node B. It automatically returns to the manager state C. It will be removed from the cluster and placed in a standalone group D. It will perform a health check and be demoted to standby

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 8

An administrator wants to use FortiNAC-F to collect an application inventory for hosts. Which two options would satisfy this requirement?
(Choose two.)

A. MDM integration B. Device profiling rules C. Portal page on-boarding options D. Agent technology

Discussion 0

Correct Answer: A,D Vote an answer

Question 9

Refer to the exhibit. An administrator has configured the DHCP scope for a registration isolation network, but the isolation process isn't working.
What is the problem with the configuration?

A. The label uses a system-reserved value. B. The lease pool does not contain a complete subnet. C. The domain name server designation is incorrect. D. The gateway defined for the scope is incorrect.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Fortinet NSE 6 - FortiNAC-F 7.6 Administrator - NSE6_FNC_AD-7.6 Exam Practice Test