NO.41 Which two policy types can be created on a FortiNAC Control Manager? (Choose two.)

NO.42 A user was attempting to register their host through the registration captive portal. After successfully registering, the host remained in the registration VLAN. Which two conditions would cause this behavior? (Choose two.)

NO.43 An administrator is configuring FortiNAC-F to manage FortiGate VPN users. As part of the configuration, the administrator must configure a few FortiGate firewall policies.
What is the purpose of the FortiGate firewall policy that applies to clients not yet authorized by FortiNAC-F?

NO.44 As part of a company policy, all end stations must be scanned for compliance each day. The security administrators want to satisfy this requirement without any necessary interaction from the end user. Which two agents can provide that functionality? (Choose two.)

NO.45 Refer to the exhibits.


An administrator is troubleshooting visibility issues on a modeled switch. The switch is configured to use link traps and to provision hosts based on network access policies. The administrator is seeing hosts on ports with no hosts connected and not seeing hosts on ports where hosts are known to be connected.
What is the most likely cause?

NO.46 Refer to the exhibit.

An administrator wants to ensure that guest accounts created from this template are not allowed network access outside of the designated times.
To achieve this, all necessary configurations must be made to force isolation of hosts in which state?

NO.47 Which group type can have members added directly from the FortiNAC Control Manager?

NO.48 While discovering network infrastructure devices, a switch appears in the inventory topology with a question mark (?) on the icon. What would cause this?

NO.49 While troubleshooting a network connectivity issue, an administrator determines that a device was being automatically provisioned to an incorrect VLAN.
Where would the administrator look to identify when and why FortiNAC-F made the network access change?

NO.50 Refer to the exhibit.

An administrator is configuring FortiNAC-F for the onboarding of guest users.
Which IP address would be used for the gateway defined in the DHCP scope?

NO.51 When configuring isolation networks in the configuration wizard, why does a layer 3 network type allow for more than one DHCP scope for each isolation network type?

NO.52 An administrator manages a corporate environment where all users log into the corporate domain each time they connect to the network. The administrator wants to leverage login scripts to use a FortiNAC-F agent to enhance endpoint visibility Which agent can be deployed as part of a login script?

NO.53 Refer to the exhibit.

Which devices are automatically evaluated by these device profiling rules?

NO.54 Which two actions must the administrator perform to allow FortiNAC-F to process incoming syslog messages from an unknown vendor? (Choose two.)

NO.55 Refer to the exhibits. What would happen if the highlighted port with connected hosts was placed in both the Forced Registration and Forced Remediation port groups?

NO.56 As part of a FortiNAC-F integration with FortiGate for management of VPN users, what must be configured on FortiGate to keep FortiNAC-F up to date with VPN session information?

NO.57 Which two statements are true about integrating a third-party device using SNMP traps from that device as input to generate an event? (Choose two.)

NO.58 Which command line shell and scripting language does FortiNAC use for WinRM?

NO.59 While deploying FortiNAC-F devices in a 1+1 HA configuration, the administrator has chosen to use the shared IP address option.
Which condition must be met for this type of deployment?

NO.60 In which three ways would deploying a FortiNAC-F Manager into a large environment consisting of several FortiNAC-F CAs simplify management? (Choose three.)

NO.61 An administrator wants to create a conference manager administrator account but would like to limit the number of conference accounts that can be generated to 30.
Which statement about conference accounts is true?

NO.62 Refer to the exhibit.

Given this topology, and a layer 3 registration network configuration, which IP address would be designated in the DHCP relay configuration for the registration network?

NO.63 Which two requirements must be met to set up an N+1 HA cluster? (Choose two.)