Question 1

While deploying FortiNAC-F devices in a 1+1 HA configuration, the administrator has chosen to use the shared IP address option. Which condition must be met for this type of deployment?

Options :

A : The isolation network type is layer 3.

B : There is a direct cable link between FortiNAC-F devices.

C : The primary and secondary administrative interfaces are on the same subnet.

D : The isolation network type is Layer 2.

Answer: C

Question 2

When FortiNAC-F is managing VPN clients connecting through FortiGate, why must the clients run a FortiNAC-F agent?

Options :

A : To transparently update The client IP address upon successful authentication

B : To collect user authentication details

C : To collect the client IP address and MAC address

D : To validate the endpoint policy compliance

Answer: C

Question 3

Refer to the exhibit. After a successful layer 2 poll, two hosts were learned on the same port The port is a member of the RoleBased Access and Forced Registration groups. The switch has been configured to leverage a single isolation VLAN. How will FortiNAC-F manage this port?

Options :

A : The port will be provisioned to the isolation network

B : The port will be provisioned for the normal state host, but the second host will have access to only theisolation portal page

C : The port will be provisioned as an uplink to a hub or unmanaged switch.

D : The port will be added to the Access Point Management group

Answer: A

Question 4

An administrator has created several device profiling rules and evaluated all existing devices in the database. Some of the devices appear in the profiled devices view because they matched a rule, but they remain unknown and the registration column in the profiled devices view shows " No " . What is the most likely cause?

Options :

A : The confirm device profiling rule option is not enabled.

B : The devices match more than one device profiling rule.

C : The device profiling rule has registration set to manual.

D : The devices have persistent agents installed, and the point of connection has PA optimization enabled.

Answer: C

Question 5

Refer to the exhibit.Given this topology, and a layer 3 registration network configuration, which IP address would be designated in the DHCP relay configuration for the registration network?

Options :

A : 192.168.10.254

B : 192.168.100 75

C : 192.168.100.20

D : 192.168.200.10

Answer: D