Security Policy Components Quiz

Play an AI-generated podcast conversation about this lesson

What is the core offering of Fortinet in terms of Network Access Control (NAC)?

FortiNAC (correct)

FortiLink NAC

FortiGate

Forti-Switch

Which solution offers base-level discovery and control for free as a feature of the LAN Edge solution?

Forti-Switch

FortiLink NAC (correct)

FortiGate

FortiNAC

Which component is optional in a FortiNAC deployment and is primarily used for generating reports?

NCAS

Management

Application and control

FortiAnalyzer (correct)

What is the primary purpose of the FortiNAC Control Manager in a large distributed environment?

Management Signup and view all the answers

Which statement accurately describes Fortinet's belief about the importance of network access control?

It is essential for security at the edges of the network. Signup and view all the answers

In what type of deployments can FortiNAC be utilized according to the text?

Mid-sized to large enterprise deployments Signup and view all the answers

What type of SSL certificate is recommended for the FortiNAC captive portal?

Certificate signed by a public CA Signup and view all the answers

Which protocols need to be enabled on the FortiGate management interface for it to be added to the FortiNAC device inventory?

HTTPS and SSH Signup and view all the answers

What is the purpose of the Authentication VLAN in FortiNAC captive networks?

To isolate registered clients during user authentication Signup and view all the answers

When adding devices to the FortiNAC device inventory, what should one always do before validation?

Validate Credentials Signup and view all the answers

How does FortiNAC determine the state of a host when it connects to the network?

Based on device profiling rules Signup and view all the answers

Which protocol is necessary for carrying out remote tasks like manual polling and scheduled tasks in FortiNAC network modeling?

SNMP Signup and view all the answers

What is the recommended type of certificate to use for EAP and EAP-TLS in FortiNAC?

SAN certificate Signup and view all the answers

Which component of FortiNAC is responsible for providing standard visibility with limited control features?

FortiNAC Base Signup and view all the answers

What feature is specifically included in FortiNAC Pro but not in FortiNAC Plus or FortiNAC Base?

Real-time endpoint visibility Signup and view all the answers

Which license type of FortiNAC is recommended for comprehensive Zero Trust Access (ZTA) features?

FortiNAC Pro Signup and view all the answers

What is the responsibility of the FortiNAC Control Manager?

Global version control and scalability Signup and view all the answers

Which method does FortiNAC commonly use to communicate with infrastructure devices for data collection and management?

SNMP Signup and view all the answers

In what way does FortiAnalyzer support the FortiNAC deployment?

Centralized logging Signup and view all the answers

Which component is considered the only required component while configuring and deploying FortiNAC?

NCAS Signup and view all the answers

What does FortiNAC Plus offer beyond the features provided by FortiNAC Base?

"Advanced NAC Controls such as endpoint compliance" Signup and view all the answers

What happens if no filter is matched in the security alert parsing process?

The process exits and nothing occurs Signup and view all the answers

In the FortiNAC network access workflow, how does the system determine if a device is compliant?

Using information gathered from agents or MDM Signup and view all the answers

What is the role of a security trigger in the FortiNAC system?

To activate one or more filters Signup and view all the answers

How do user and/or host profiles impact the security alarm creation process in FortiNAC?

They define different workflows for endpoints Signup and view all the answers

What determines if a security alarm is created in the FortiNAC system?

Matching of one or more filters within a defined period Signup and view all the answers

What types of activities can be included in the actions of a security rule in FortiNAC?

Multiple activities including notification, network access, and script execution Signup and view all the answers

What is the purpose of FortiNAC using DHCP fingerprinting?

To identify connected devices and gain enhanced visibility Signup and view all the answers

In a FortiNAC deployment, what is the main task carried out during the Management Configuration stage?

Licensing, configuring management interfaces, and SSL Certificates setup Signup and view all the answers

What is required by FortiNAC to model devices in the network during the Network Modelling stage?

ICMP and SNMP connectivity to the devices Signup and view all the answers

Which statement accurately describes the Device Onboarding stage in FortiNAC?

Devices are profiled and registered based on policy configuration Signup and view all the answers

What is the main focus of Policy Configuration in a FortiNAC deployment?

Assigning different access levels based on device profiles and compliance Signup and view all the answers

In FortiNAC, what is the function of ETH1 interface?

'Service or Application' interface for selected applications Signup and view all the answers

Why should labels of DHCP scopes in FortiNAC not begin with reserved strings like 'AUTH' or 'DE'?

'AUTH' and 'DE' are used for system reserved functions Signup and view all the answers

What does FortiNAC need from network devices to gather information and maintain control?

'Read-Write' SNMP and full SSH access Signup and view all the answers

What is recommended for LDAP access in FortiNAC?

'Service-Account' without administrator privileges Signup and view all the answers

Which statement accurately describes FortiNAC's SSL Certificates usage?

FortiNAC can use SSL certificates issued by both internal private or public Certificate Authorities. Signup and view all the answers

What triggers Layer-2 data polling for device detection in FortiNAC?

All of the above Signup and view all the answers

How is a host record populated in FortiNAC after Layer-3 data polling?

With MAC-address and IP-address Signup and view all the answers

In FortiNAC, what occurs if both the 'If Host State is' and 'And System Group Membership is' conditions in the same row are true?

Host moves to the Registration captive network Signup and view all the answers

What triggers Layer-2 data polling in FortiNAC for slow detection?

Scheduled tasks Signup and view all the answers

How does FortiNAC simplify network policy management through Logical Networks?

By mapping different logical networks to individual devices Signup and view all the answers

What information is critical for some FortiNAC capabilities that is obtained through Layer-3 data polling?

MAC-address to IP-address correlation Signup and view all the answers

When are AP (Access Point) values designated in FortiNAC?

In Logical Network configuration Signup and view all the answers

What triggers real-time Layer-2 data polling in FortiNAC when devices connect or disconnect from edge devices?

'Linkup', 'WarmStart', 'ColdStart', and 'Linkdown' traps Signup and view all the answers

What are the methods used to evaluate connected rogue devices in FortiNAC?

Device profiling rules Signup and view all the answers

In FortiNAC, what settings can be leveraged for policy enforcement?

Classification settings Signup and view all the answers

How does FortiNAC handle user self-registration?

With an authentication VLAN Signup and view all the answers

What is presented to a rogue host isolated to the registration captive network in FortiNAC?

A registration page Signup and view all the answers

Which authentication method will take precedence in FortiNAC?

Local user database Signup and view all the answers

What happens when a host is isolated on a wired port in FortiNAC?

The host's link is dropped Signup and view all the answers

What is the purpose of the captive portal in FortiNAC?

To present additional information to hosts Signup and view all the answers

How does FortiNAC ensure rogue hosts resolve domain names to its interface?

"root.hint" files on FortiNAC Signup and view all the answers

Which component manages RADIUS connections in FortiNAC's local service?

"MAB, EAP-TLS, and PEAP" Signup and view all the answers

What are the two main components that compose a security policy according to the text?

Profile and Configuration Signup and view all the answers

Which of the following is NOT one of the agent types supported by FortiNAC?

Dynamic agent Signup and view all the answers

What is the purpose of the dissolvable agent in FortiNAC?

To dissolve after completing its task Signup and view all the answers

How can FortiNAC gather application and compliance information?

By integrating with MDMs supporting application gathering or using FortiNAC agents Signup and view all the answers

Which of the following is NOT a function supported by FortiNAC agents?

Network access configuration Signup and view all the answers

What determines the level of network access a user should be granted in FortiNAC?

The compliance information collected from the endpoint Signup and view all the answers

What is the primary purpose of a filter in FortiNAC security rules?

To set criteria for evaluation Signup and view all the answers

How does FortiNAC apply security policies when a match is identified?

It applies the highest ranked security policy for each type that matches. Signup and view all the answers