NSE6_FNC-8.5 Fortinet NSE 6 – FortiNAC 8.5 Exam

Fortinet NSE 6 – FortiNAC 8.5
Exam series: NSE6_FNC-8.5
Number of questions: 30
Exam time: 60 minutes
Language: English
Product version: FortiNAC 8.5
Status: Available

Network Security Specialist
The Network Security Specialist designation recognizes your comprehensive skills with fabric products beyond the firewall. This designation is recognized after you achieve at least four Fortinet Specialist certificates on Fortinet enhanced products. The Network Security Specialist curriculum offers nine courses. We recommend this curriculum for network and security professionals who are involved in managing and supporting specific Fortinet

The Fortinet NSE Certification Program
The Fortinet Network Security Expert (NSE) program is an eight-level training and certification program that is designed to provide interested technical professionals with an independent validation of their network security skills and experience. The NSE program includes a wide range of self-paced and instructor-led courses, as well as practical, experiential exercises that demonstrate mastery of complex network security concepts.

QUESTION 1
Which three communication methods are used by the FortiNAC to gather information from, and control, infrastructure devices? (Choose three.)

A. SNMP
B. RADIUS
C. FTP
D. CLI
E. SMTP

Correct Answer: ABC

Explanation:
Set up SNMP communication with FortiNAC
RADIUS Server that is used by FortiNAC to communicate
FortiNAC can be configured via CLI to use HTTP or HTTPS for OS updates instead of FTP.
Reference: https://docs.fortinet.com/document/fortinac/8.3.0/administration-guide/28966/snmp
https://docs.fortinet.com/document/fortinac/8.8.0/administration-guide/938271/configure-radius-settings
https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/e7ebbdaa-cabf-11ea-8b7d-
00505692583a/FortiNAC_Deployment_Guide.pdf

QUESTION 2
Which three circumstances trigger Layer 2 polling of infrastructure devices? (Choose three.)

A. A matched security policy
B. Scheduled poll timings
C. Linkup and Linkdown traps
D. Manual polling
E. A failed Layer 3 poll

Correct Answer: BCD

QUESTION 3
How should you configure MAC notification traps on a supported switch?

A. Configure them only on ports set as 802.1q trunks
B. Configure them on all ports except uplink ports
C. Configure them on all ports on the switch
D. Configure them only after you configure linkup and linkdown traps

Correct Answer: B