Free NSE7-ZTA-7-2 Fortinet NSE7-ZTA-7-2 Practice Test Question

Question 1 (Topic 1)

Refer to the exhibit. Which port group membership should you enable on FortiNAC to isolate rogue hosts?

Select an option, then click Submit answer.

○ Forced Authentication
○ Forced Registration
○ Forced Remediation
○ Reset Forced Registration

Reference / correct answer:

Forced Registration

Most accepted answer: B. Forced Registration

Community votes: B=3

Selected Answer: B B is correct. Registration VLAN is used to isolate unregistered rogue devices. upvoted 1 times

Selected Answer: B Answer is B. Registration VLAN is used to isolate unregistered rogue devices. Remediation VLAN is used to Quarantine Host or non compliance. upvoted 2 times

Answer is B. Registration VLAN is used to isolate unregistered rogue devices. Remediation VLAN is used to Quarantine Host or non compliance. upvoted 1 times

Selected Answer: B • Registration VLAN is used to isolate unregistered rogue devices. upvoted 2 times

FortiNAC captive networks are those networks used for the isolation of hosts, and the presentation of captive portals. There are seven types of captive networks: • Registration VLAN is used to isolate unregistered rogue devices. • Remediation VLAN is used to quarantine devices that failed endpoint compliance. • Disabled hosts are placed in dead end VLAN. • Authentication VLAN is used to isolate registered clients from the production network during user authentication. • Virtual private network (VPN) is used for clients who connect to the network through VPN services. • Access point management is used for clients that connect through devices managed by access point management. • Isolation VLAN uses the state of the client and redirects them to the appropriate isolation web pages. If you use this VLAN type, the configuration of the other VLAN types are optional. upvoted 2 times

Question 2 (Topic 1)

Which three methods can you use to trigger layer 2 polling on FortiNAC? (Choose three.)

Select an option, then click Submit answer.

○ Link traps
○ Manual polling
○ Scheduled tasks
○ Polling using API
○ Polling scripts

Reference / correct answer:

Link traps

Most accepted answer: A. Link traps

Community votes: A=2, B=2, C=2

Selected Answer: ABC A, B, C are correct. Page 89. The three ways that Layer 2 polling is triggered are: * Manual polling: Manual polling is initiated when an administrative user right-clicks the device in the topology tree and selects Poll for L2 (Hosts) Info, or clicks Network > L2 Polling. * Scheduled: Layer 2 polling is scheduled in the Network > L2 Polling view. You can change the defaultscheduled intervals. * Link traps: Link traps received from an edge device trigger FortiNAC to perform a Layer 2 poll to update its awareness of devices that are connected on that edge device. The traps that trigger the poll are: Linkup, Linkdown, WarmStart, and ColdStart. This trigger keeps FortiNAC up-to-date in real time as devices connect to and disconnect from edge devices. upvoted 1 times

Selected Answer: ABC Manual polling, For troubleshooting. Scheduled tasks, Slow Detection. Link traps, Standard Detection. upvoted 3 times

yes is correct upvoted 1 times

Layer-2 data polling can be triggered by: Manual polling, For troubleshooting. Scheduled tasks, Slow Detection. Link traps, Standard Detection. upvoted 1 times

Question 3 (Topic 1)

Which method is used for manual device registration on FortiNAC?

Select an option, then click Submit answer.

○ Device portal
○ Hosts view
○ An agent
○ Device profiling rules

Free NSE7-ZTA-7-2 – Fortinet NSE7-ZTA-7-2 Practice Test Question