Which two things must be done to allow FortiNAC to process incoming syslog messages from an unknown vendor? (Choose two.)
Answer(s): A,B
To allow FortiNAC to process incoming syslog messages from an unknown vendor, two steps must be taken:Creation of a customized event parser: This enables FortiNAC to parse and integrate syslog messages from any vendor or device, as long as the messages are in CSV, CEF, or Tag/Value format. Modeling the device in the Topology view: Any device that sends syslog messages to FortiNAC must be modeled in this view. FortiNAC will not process syslog or trap messages unless the source address belongs to a device modeled in the topology.ReferenceFortiNAC 7.2 Study Guide, pages 428 and 399
Which two methods can be used to gather a list of installed applications and application details from a host? (Choose two.)
Answer(s): A,C
To gather a list of installed applications and application details from a host, two methods can be used:Agent technology: FortiNAC uses agent technology to collect all installed applications on an endpoint.Integration with MDMs (Mobile Device Management systems): M, D, Ms that support application gathering can be integrated with FortiNAC to collect application information.ReferenceFortiNAC 7.2 Study Guide, page 302
Which devices would be evaluated by device profiling rules?
Answer(s): B
Device profiling rules in FortiNAC are used to evaluate and classify rogue devices. These rules can be configured to automatically, manually, or through sponsorship evaluate and classify unknown untrusted devices as they are identified and created.ReferenceFortiNAC 7.2 Study Guide, page 98
Which three are components of a security rule? (Choose three.)
Answer(s): C,D,E
Components of a security rule in FortiNAC include:Trigger: The condition or event that initiates the evaluation of the rule. User or Host Profile: A requirement that can be added to a rule to specify the user or host profile that must be matched.Action: The activities or responses that FortiNAC performs when the rule is matched.ReferenceFortiNAC 7.2 Study Guide, page 419
Refer to the exhibit.If a host is connected to a port in the Building 1 First Floor Ports group, what must also be true to match this user/host profile?
Answer(s): D
Looking at the provided exhibit which shows the Modify User/Host Profile window, the following must be true for a host to match the user/host profile:The host must be connected to a port within the "Building 1 First Floor Ports" group.The host must fulfill at least one of the following attributes:Have a role value of "Contractor"Have an installed persistent agent with the security and access value of "Contractor" The host must be connected between the specified times of 6 AM and 5 PM on any day of the week. The profile specifies that the host can match the profile by having any one of the listed attributes (Role as Contractor, Persistent Agent installed with specific security & access value), and the time condition must also be met. Therefore, the correct answer is D, which includes "or" conditions for the role value and persistent agent and specifies the correct time frame.
Post your Comments and Discuss Fortinet NSE6_FNC-7.2 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the NSE6_FNC-7.2 content, but please register or login to continue.