Free NSE6_FNC-7.2 Exam Braindumps
Fortinet NSE 6 - FortiNAC 7.2 Questions 11–15 (page: 4)

Updated On: 10-Feb-2026

How are logical networks assigned to endpoints?

  1. Through device profiling rules
  2. Through network access policies
  3. Through Layer 3 polling configurations
  4. Through FortiGate IPv4 policies

Answer(s): A

Explanation:

Logical networks are assigned to endpoints through device profiling rules in FortiNAC. These networks appear in device Model Configuration views and are used for endpoint isolation based on the endpoint's state or status



By default, if after a successful Layer 2 poll, more than 20 endpoints are seen connected on a single switch port simultaneously, what happens to the port?

  1. The port becomes a threshold uplink
  2. The port is disabled
  3. The port is added to the Forced Registration group
  4. The port is switched into the Dead-End VLAN

Answer(s): A

Explanation:

If more than 20 endpoints are seen connected on a single switch port simultaneously after a successful Layer 2 poll, the port is designated as an uplink. FortiNAC will ignore all physical addresses learned on an uplink port and will not perform any control operations on it



An administrator wants the Host At Risk event to generate an alarm.
What is used to achieve this result?

  1. A security trigger activity
  2. A security filter
  3. An event to alarm mapping
  4. An event to action mapping

Answer(s): C

Explanation:

To generate an alarm from a Host At Risk event, an administrative user must create an Event to Alarm Mapping for the Vulnerability Scan Failed event. Within this alarm mapping, a host security action must be designated to mark the host at risk



Which three communication methods are used by FortiNAC to gather information from and control, infrastructure devices? (Choose three.)

  1. CLI
  2. SMTP
  3. SNMP
  4. FTP
  5. RADIUS

Answer(s): A,C,E

Explanation:

FortiNAC Study Guide 7.2 | Page 11
FortiNAC uses various methods to communicate with infrastructure devices such as SNMP for discovery and ongoing management, SSH or Telnet through the CLI for tasks related to the infrastructure, and RADIUS for handling specific types of requests



An administrator is configuring FortiNAC to manage FortiGate VPN users. As part of the configuration, the administrator must configure a few FortiGate firewall policies.
What is the purpose of the FortiGate firewall policy that applies to unauthorized VPN clients?

  1. To deny access to only the production DNS server
  2. To allow access to only the FortiNAC VPN interface
  3. To allow access to only the production DNS server
  4. To deny access to only the FortiNAC VPN interface

Answer(s): B



Viewing page 4 of 13
Viewing questions 16 - 20 out of 57 questions


Post your Comments and Discuss Fortinet NSE6_FNC-7.2 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!