View Full Fortinet NSE5_FNC_AD-7.6 Exam Dumps and Practice Test Dumps

 

Question 341: Which FortiNAC capability provides information about connected endpoints and their network relationships?

1. Groups
   2. Isolation networks
   3. Network visibility
   4. Captive networks

Correct Answer: 3. Network visibility

Explanation:
Network visibility provides FortiNAC with information about connected endpoints and relevant network relationships. This capability gives administrators awareness of devices present in the environment and provides information that can support endpoint administration. Visibility can be used alongside device profiling and Groups to build a more complete understanding of the endpoint environment. It also supports troubleshooting and access-control decisions by giving administrators information about the devices and connections being managed.

Question 342: What does infrastructure-device modeling allow FortiNAC to do?

1. Represent and understand relevant network infrastructure devices
   2. Automatically create administrator accounts
   3. Forward all events to external systems
   4. Place endpoints into captive networks

Correct Answer: 1. Represent and understand relevant network infrastructure devices

Explanation:
Infrastructure-device modeling provides FortiNAC with a representation of the network infrastructure devices with which it interacts. This helps the platform understand the network environment and establishes useful context for endpoint visibility and administration. Modeling infrastructure devices is distinct from profiling endpoints. Device profiling focuses on endpoint characteristics and classification, whereas infrastructure modeling focuses on the network devices that form the surrounding environment.

Question 343: Which feature is used to classify endpoints based on observed characteristics?

1. Groups
   2. Device profiling
   3. Host filters
   4. Upstream logging

Correct Answer: 2. Device profiling

Explanation:
Device profiling helps FortiNAC classify endpoints according to characteristics observed about the connected devices. Classification gives administrators additional context about the endpoints present in the environment. This information can support grouping and access-control decisions. Device profiling complements network visibility: visibility provides information and awareness about endpoints, while profiling helps interpret endpoint characteristics and assign meaningful classifications.

Question 344: What is the primary purpose of Groups in FortiNAC?

1. Forward endpoint events externally
   2. Restrict network connectivity
   3. Organize managed objects logically
   4. Discover infrastructure devices

Correct Answer: 3. Organize managed objects logically

Explanation:
Groups provide logical organization for managed objects in FortiNAC. Administrators can use Groups to categorize related endpoints or other objects, making them easier to manage consistently. Groups are different from device profiling, which focuses on endpoint classification, and network visibility, which provides awareness of connected devices. Logical organization is particularly useful when administrators need to manage larger collections of endpoints according to common administrative requirements.

Question 345: Which network is designed to provide restricted access to an endpoint?

1. Production network
   2. Captive network
   3. Isolation network
   4. Infrastructure network

Correct Answer: 3. Isolation network

Explanation:
An isolation network is used to provide a restricted network environment for an endpoint. It can be appropriate when a device should be separated from normal network resources while a condition is addressed. This differs from a captive network, which provides a controlled access experience that may require user interaction. Understanding the purpose of each network type helps administrators select the appropriate access behavior for endpoints based on their current state.

Question 346: Which FortiNAC network can provide a controlled access experience requiring user interaction?

1. Isolation network
   2. Captive network
   3. Management network
   4. Logging network

Correct Answer: 2. Captive network

Explanation:
A captive network provides a controlled network-access experience that can require interaction from the user or endpoint. It can support processes such as controlled registration or authentication before the intended level of access is provided. A captive network differs from an isolation network, which is primarily intended to restrict connectivity. The distinction is important when administrators configure different access conditions for endpoints within a FortiNAC-managed environment.

Question 347: Which task belongs to FortiNAC administrator-user management?

1. Creating and managing administrator accounts
   2. Profiling infrastructure switches
   3. Filtering network packets
   4. Discovering every endpoint manually

Correct Answer: 1. Creating and managing administrator accounts

Explanation:
Administrator-user management includes creating and managing accounts used to access the FortiNAC administrative environment. These accounts support controlled access to configuration and management functions. Administrator management is separate from endpoint functions such as device discovery, profiling, grouping, and isolation. Proper account administration is an important part of establishing and maintaining controlled administrative access to the FortiNAC system.

Question 348: What is the main purpose of host filters?

1. To create isolation networks
   2. To quickly locate hosts matching selected criteria
   3. To configure administrator accounts
   4. To model infrastructure devices

Correct Answer: 2. To quickly locate hosts matching selected criteria

Explanation:
Host filters allow administrators to narrow the hosts displayed according to selected criteria. This can make operational tasks more efficient, especially in environments containing many endpoints. Instead of manually reviewing a complete host list, administrators can use filtering to locate relevant devices or subsets of hosts. Host filters are therefore useful for administration and troubleshooting, but they do not replace endpoint visibility, device profiling, or network-access mechanisms.

Question 349: Which information is most useful when investigating a host connectivity issue?

1. Host connectivity and related network information
   2. Only administrator account information
   3. Only Group names
   4. Only upstream logging settings

Correct Answer: 1. Host connectivity and related network information

Explanation:
Investigating a host connectivity issue requires information about the endpoint’s connection to the network and related network details. Reviewing this information can help administrators understand the host’s current connectivity state and investigate potential access or infrastructure problems. Other information, such as administrator accounts or logging settings, may be useful for different administrative purposes but does not directly provide the same connectivity context needed for host troubleshooting.

Question 350: Why is infrastructure modeling important in FortiNAC?

1. It eliminates the need for endpoint visibility
   2. It creates user accounts automatically
   3. It helps FortiNAC understand and interact with relevant network infrastructure
   4. It disables host filtering

Correct Answer: 3. It helps FortiNAC understand and interact with relevant network infrastructure

Explanation:
Infrastructure modeling helps FortiNAC understand the network devices that make up the environment with which it interacts. This provides important context for network visibility and endpoint administration. By maintaining a representation of relevant infrastructure, FortiNAC can better understand the environment in which connected endpoints operate. Infrastructure modeling therefore complements endpoint-focused functions such as visibility and device profiling rather than replacing them.

Question 351: Which capability provides awareness of endpoints connected to the network?

1. Upstream logging
   2. Network visibility
   3. Groups
   4. Captive network

Correct Answer: 2. Network visibility

Explanation:
Network visibility provides awareness of endpoints connected to the network and supplies relevant information about those devices and their connections. This awareness supports many other FortiNAC functions, including profiling, grouping, troubleshooting, and access-control administration. Maintaining endpoint visibility is fundamental because administrators need reliable information about connected devices before they can effectively classify, organize, or manage their network access.

Question 352: Which feature provides logical categorization for managed objects?

1. Groups
   2. Device profiling
   3. Isolation network
   4. Host filters

Correct Answer: 1. Groups

Explanation:
Groups provide logical categorization for managed objects within FortiNAC. Administrators can use them to organize related endpoints or objects according to common administrative requirements. This structure can simplify management and help support consistent treatment of related objects. Groups are distinct from device profiling, which classifies endpoints, and host filters, which help administrators locate hosts matching specified criteria.

Question 353: Which statement correctly describes the relationship between visibility and profiling?

1. Visibility provides endpoint information, while profiling helps classify endpoints
   2. Profiling forwards events, while visibility creates administrator accounts
   3. Visibility isolates endpoints, while profiling creates Groups
   4. Both functions only manage logging

Correct Answer: 1. Visibility provides endpoint information, while profiling helps classify endpoints

Explanation:
Network visibility and device profiling perform complementary functions. Visibility provides awareness and information about connected endpoints and their network relationships. Device profiling uses observed characteristics to help classify those endpoints. The resulting classification can provide additional context for grouping and access-control decisions. Keeping these functions distinct helps administrators understand how FortiNAC builds information about the endpoint environment.

Question 354: What is the purpose of upstream logging?

1. To organize endpoints into Groups
   2. To restrict endpoint connectivity
   3. To forward FortiNAC event information to an external logging destination
   4. To classify endpoints

Correct Answer: 3. To forward FortiNAC event information to an external logging destination

Explanation:
Upstream logging allows FortiNAC-F event information to be forwarded to an external or upstream logging destination. This can support centralized monitoring and operational analysis by making relevant events available to another logging system. Upstream logging is focused on event forwarding and is therefore different from capabilities such as device profiling, Groups, and network isolation. It can form part of a broader logging and monitoring architecture.

Question 355: Which combination provides complementary capabilities for endpoint administration?

1. Captive networks, administrator accounts, and logging
   2. Isolation networks, host filters, and passwords
   3. Network visibility, device profiling, and Groups
   4. Configuration wizard, logging, and captive networks

Correct Answer: 3. Network visibility, device profiling, and Groups

Explanation:
Network visibility, device profiling, and Groups work together to support endpoint administration. Visibility provides awareness and information about connected devices. Profiling helps classify endpoints using observed characteristics. Groups provide logical organization of managed objects. Together, these capabilities give administrators a structured understanding of endpoints and allow related devices to be organized for consistent management and subsequent access-control administration.

Question 356: When should an isolation network be used?

1. When an endpoint needs restricted access while a condition is addressed
   2. When an administrator needs to locate a host
   3. When a user must complete an interactive access process
   4. When events must be sent to an external logger

Correct Answer: 1. When an endpoint needs restricted access while a condition is addressed

Explanation:
An isolation network is appropriate when an endpoint should receive restricted network access while a condition is addressed. This keeps the endpoint separated from normal network resources rather than granting unrestricted connectivity. A captive network is more closely associated with a controlled, potentially interactive access experience, while host filters are used to locate devices and upstream logging is used for event forwarding. Each capability therefore addresses a different administrative requirement.

Question 357: Which FortiNAC feature helps administrators find specific hosts efficiently?

1. Captive network
   2. Host filters
   3. Device profiling
   4. Isolation network

Correct Answer: 2. Host filters

Explanation:
Host filters help administrators locate hosts by narrowing the displayed information according to selected criteria. This is useful when a FortiNAC deployment contains many endpoints and an administrator needs to identify a particular device or subset of devices. Filtering improves operational efficiency without changing the underlying endpoint state. It is therefore primarily a search and administration function rather than a method for classification, isolation, or user authentication.

Question 358: Which feature is responsible for classifying endpoints based on observed characteristics?

1. Device profiling
   2. Groups
   3. Network visibility
   4. Upstream logging

Correct Answer: 1. Device profiling

Explanation:
Device profiling classifies endpoints based on characteristics observed by FortiNAC. Classification helps administrators gain more context about the type or nature of connected devices. This information can then be used with other capabilities, such as Groups, to organize endpoints and support appropriate access-control decisions. Network visibility provides the underlying awareness and information, while profiling focuses specifically on interpreting endpoint characteristics for classification.

Question 359: Which sequence provides a logical foundation for FortiNAC access-control administration?

1. Isolate all endpoints before establishing visibility
   2. Apply access controls before identifying endpoints
   3. Configure initial settings, establish visibility, organize endpoints, then apply access controls
   4. Disable visibility after infrastructure discovery

Correct Answer: 3. Configure initial settings, establish visibility, organize endpoints, then apply access controls

Explanation:
A logical administration sequence begins with configuring the initial FortiNAC settings and establishing visibility into the network and endpoints. Administrators can then understand, classify, and organize the available endpoint information before applying appropriate access controls. This approach provides a structured basis for network-access decisions and ongoing administration. Establishing visibility and organization first also gives administrators useful context when troubleshooting endpoint access or connectivity issues.

Question 360: Which three capabilities together support endpoint awareness, classification, and logical organization?

1. Isolation networks, captive networks, and upstream logging
   2. Host filters, administrator accounts, and configuration wizard
   3. Infrastructure modeling, captive networks, and logging
   4. Network visibility, device profiling, and Groups

Correct Answer: 4. Network visibility, device profiling, and Groups

Explanation:
Network visibility, device profiling, and Groups provide three complementary stages of endpoint administration. Network visibility supplies awareness and information about connected devices. Device profiling helps classify those devices based on observed characteristics. Groups provide logical organization of managed objects. Together, these capabilities help administrators understand the endpoint environment, classify connected devices, and organize them for consistent management and appropriate access-control administration.