NSE7_ZTA-7.2 Practice Test

NSE7_ZTA-7.2 Practice Test practice questions, page 2 of 2, with answer review and explanations.

Question 6

Refer to the exhibit. Which port group membership should you enable on FortiNAC to isolate rogue hosts?

  1. Forced Authentication
  2. Forced Registration
  3. Forced Remediation
  4. Reset Forced Registration

Question 7

Which statement is true about disabled hosts on FortiNAC?

  1. They are quarantined and placed in the remediation VLAN.
  2. They are placed in the authentication VLAN to reauthenticate.
  3. They are marked as unregistered rogue devices.
  4. They are placed in the dead end VLAN.

Question 8

Refer to the exhibits. Which statement is true about the configuration shown in the exhibit?

  1. The domain that FortiClient is connecting to should match the domain to which the certificate is issued.
  2. If the FortiClient EMS server certificate is invalid, FortiClient connects silently.
  3. The connection from FortiClient to FortiClient EMS uses TCP and TLS 1.2.
  4. default_ZTNARoot CA signs the FortiClient certificate for the SSL connectivity to FortiClient EMS.

Question 9

Which factor is a prerequisite on FortiNAC to add a Layer 3 router to its inventory?

  1. Allow HTTPS access from the router to the FortiNAC eth0 IP address.
  2. Allow FTP access to the FortiNAC database from the router.
  3. The router responding to ping requests from the FortiNAC eth1 IP address.
  4. SNMP or CLI access to the router to carry out remote tasks.