Security Policy Components Quiz

What is the core offering of Fortinet in terms of Network Access Control (NAC)?

Which solution offers base-level discovery and control for free as a feature of the LAN Edge solution?

Which component is optional in a FortiNAC deployment and is primarily used for generating reports?

What is the primary purpose of the FortiNAC Control Manager in a large distributed environment?

Which statement accurately describes Fortinet's belief about the importance of network access control?

In what type of deployments can FortiNAC be utilized according to the text?

What type of SSL certificate is recommended for the FortiNAC captive portal?

Which protocols need to be enabled on the FortiGate management interface for it to be added to the FortiNAC device inventory?

What is the purpose of the Authentication VLAN in FortiNAC captive networks?

When adding devices to the FortiNAC device inventory, what should one always do before validation?

How does FortiNAC determine the state of a host when it connects to the network?

Which protocol is necessary for carrying out remote tasks like manual polling and scheduled tasks in FortiNAC network modeling?

What is the recommended type of certificate to use for EAP and EAP-TLS in FortiNAC?

Which component of FortiNAC is responsible for providing standard visibility with limited control features?

What feature is specifically included in FortiNAC Pro but not in FortiNAC Plus or FortiNAC Base?

Which license type of FortiNAC is recommended for comprehensive Zero Trust Access (ZTA) features?

What is the responsibility of the FortiNAC Control Manager?

Which method does FortiNAC commonly use to communicate with infrastructure devices for data collection and management?

In what way does FortiAnalyzer support the FortiNAC deployment?

Which component is considered the only required component while configuring and deploying FortiNAC?

What does FortiNAC Plus offer beyond the features provided by FortiNAC Base?

What happens if no filter is matched in the security alert parsing process?

In the FortiNAC network access workflow, how does the system determine if a device is compliant?

What is the role of a security trigger in the FortiNAC system?

How do user and/or host profiles impact the security alarm creation process in FortiNAC?

What determines if a security alarm is created in the FortiNAC system?

What types of activities can be included in the actions of a security rule in FortiNAC?

What is the purpose of FortiNAC using DHCP fingerprinting?

In a FortiNAC deployment, what is the main task carried out during the Management Configuration stage?

What is required by FortiNAC to model devices in the network during the Network Modelling stage?

Which statement accurately describes the Device Onboarding stage in FortiNAC?

What is the main focus of Policy Configuration in a FortiNAC deployment?

In FortiNAC, what is the function of ETH1 interface?

Why should labels of DHCP scopes in FortiNAC not begin with reserved strings like 'AUTH' or 'DE'?

What does FortiNAC need from network devices to gather information and maintain control?

What is recommended for LDAP access in FortiNAC?

Which statement accurately describes FortiNAC's SSL Certificates usage?

What triggers Layer-2 data polling for device detection in FortiNAC?

How is a host record populated in FortiNAC after Layer-3 data polling?

In FortiNAC, what occurs if both the 'If Host State is' and 'And System Group Membership is' conditions in the same row are true?

What triggers Layer-2 data polling in FortiNAC for slow detection?

How does FortiNAC simplify network policy management through Logical Networks?

What information is critical for some FortiNAC capabilities that is obtained through Layer-3 data polling?

When are AP (Access Point) values designated in FortiNAC?

What triggers real-time Layer-2 data polling in FortiNAC when devices connect or disconnect from edge devices?

What are the methods used to evaluate connected rogue devices in FortiNAC?

In FortiNAC, what settings can be leveraged for policy enforcement?

How does FortiNAC handle user self-registration?

What is presented to a rogue host isolated to the registration captive network in FortiNAC?

Which authentication method will take precedence in FortiNAC?

What happens when a host is isolated on a wired port in FortiNAC?

What is the purpose of the captive portal in FortiNAC?

How does FortiNAC ensure rogue hosts resolve domain names to its interface?

Which component manages RADIUS connections in FortiNAC's local service?

What are the two main components that compose a security policy according to the text?

Which of the following is NOT one of the agent types supported by FortiNAC?

What is the purpose of the dissolvable agent in FortiNAC?

How can FortiNAC gather application and compliance information?

Which of the following is NOT a function supported by FortiNAC agents?

What determines the level of network access a user should be granted in FortiNAC?

What is the primary purpose of a filter in FortiNAC security rules?

How does FortiNAC apply security policies when a match is identified?