NSE5-NAC Practice Questions & Answers • ExamPrepare

16 questions in this view

Page 1 of 3

Question 1

Refer to the exhibits.

An administrator has configured the DHCP scope for a registration isolation network, but the isolation process isn’t working.

What is the problem with the configuration?

Network Topology

DHCP configuration

The lease pool does not contain a complete subnet.
The label uses a system-reserved value.
The domain name server designation is incorrect.
The gateway defined for the scope is incorrect.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

Refer to the exhibit.

If a host is connected to a port in the Building 1 First Floor Ports group, what must also be true to match this user/host profile?

User/Host profile configuration

The host must have a role value of contractor, an installed persistent agent or a security access value of contractor, and be connected between 6 AM and 5 PM.
The host must have a role value of contractor or an installed persistent agent and a security access value of contractor, and be connected between 6 AM and 5 PM.
The host must have a role value of contractor or an installed persistent agent, a security access value of contractor, and be connected between 9 AM and 5 PM.
The host must have a role value of contractor or an installed persistent agent or a security access value of contractor, and be connected between 6 AM and 5 PM.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

Which two requirements must be met to set up an N+1 HA cluster? (Choose two.)

At least two FortiNAC-F devices designated as primary
A dedicated VLAN for primary and secondary synchronization
A FortiNAC-F manager
A FortiNAC-F device designated as a secondary

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

While deploying FortiNAC-F devices in a 1+1 HA configuration, the administrator has chosen to use the shared IP address option.

Which condition must be met for this type of deployment?

The isolation network type is layer 3.
There is a direct cable link between FortiNAC-F devices.
The primary and secondary administrative interfaces are on the same subnet.
The isolation network type is Layer 2.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

When creating a device profiling rule, what are two advantages of registering the device in the host view? (Choose two.)

The devices will have connection logs.
The devices can be associated with a user.
The devices can be polled for connection status.
The devices can be managed as a generic SNMP device.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

A user was attempting to register their host through the registration captive portal. After successfully registering, the host remained in the registration VLAN.

Which two conditions would cause this behavior? (Choose two.)

The wrong agent is installed.
There is no agent installed on the host.
The port default VLAN is the same as the Registration VLAN.
There is another unregistered host on the same port.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.