EMT Practice Test

1. Question Content...

---

Question1: What causes a host's state to change to "at risk"?

Question2: What would occur if both an unknown (rogue) device and a known (trusted) device simultaneously appeared on a port that is a member of the Forced Registration port group?

Question3: In which view would you find who made modifications to a Group?

Question4: Which three communication methods are used by FortiNAC to gather information from and control, infrastructure devices? (Choose three.)

Question5: During the on-boarding process through the captive portal, what are two reasons why a host that successfully registered would remain stuck in the Registration VLAN? (Choose two.)

Question6: How does FortiGate update FortiNAC about VPN session information?

Question7: While troubleshooting a network connectivity issue, an administrator determines that a device was being automatically provisioned to an incorrect VLAN.
Where would the administrator look to determine when and why FortiNAC made the network access change?

Question8: View the command and output shown in the exhibit.

What is the current state of this host?

Question9: Refer to the exhibit, and then answer the question below.

Which host is rogue?

Question10: What agent is required in order to detect an added USB drive?

Question11: Where do you look to determine when and why the FortiNAC made an automated network access change?

Question12: Which two are required for endpoint compliance monitors? (Choose two.}

Question13: When FortiNAC is managing VPN clients connecting through FortiGate. why must the clients run a FortiNAC agent?

Question14: Which devices would be evaluated by device profiling rules?

Question15: Where do you look to determine which network access policy, if any is being applied to a particular host?

Question16: View the output.

Examine the communication between a primary FortiNAC (192.168.10.10) and a secondary FortiNAC (192.166.10.110) configured as an HA pair What is the current state of the FortiNAC HA pair?

Question17: Refer to the exhibit.

When a contractor account is created using this template, what value will be set in the accounts Rote field?

Question18: When FortiNAC is managing FortiGate VPN users, why is an endpoint compliance policy necessary?

Question19: Where should you configure MAC notification traps on a supported switch?

Question20: When FortiNAC passes a firewall tag to FortiGate, what determines the value that is passed?

Question21: Which two things must be done to allow FortiNAC to process incoming syslog messages from an unknown vendor? (Choose two.)

Question22: When configuring isolation networks in the configuration wizard, why does a Layer 3 network type allow for more than one DHCP scope for each isolation network type?

Question23: In a wireless integration, what method does FortiNAC use to obtain connecting MAC address information?

Question24: Which three of the following are components of a security rule? (Choose three.)