Fortinet NSE6_FNC-7.2 Exam - Topic 1 Question 20 Discussion

Actual exam question for Fortinet's NSE6_FNC-7.2 exam

Question #: 20
Topic #: 1

Refer to the exhibit.

If you are forcing the registration of unknown (rogue) hosts, and an unknown (rogue) host connects to a port on the switch, what occurs?

AThe host is moved to VLAN 111.

BThe host is moved to a default isolation VLAN.

CNo VLAN change is performed.

DThe host is disabled.

Show Suggested Answer

Suggested Answer: B

Study Guide p. 356: Any time FortiNAC changes network access for an endpoint, the change is documented on the Port Changes view. This provides an administrator with valuable information when validating control configurations and enforcement.

by Osvaldo at Aug 07, 2024, 03:21 AM

Limited Time Offer

25%

Off

Get Premium NSE6_FNC-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Cassie

3 months ago

No VLAN change? That seems unlikely.

upvoted 0 times

...

Antonio

3 months ago

I've seen it go to VLAN 111 before, but not always.

upvoted 0 times

...

Dolores

3 months ago

Wait, are you sure? I thought it just gets disabled.

upvoted 0 times

...

Hannah

4 months ago

Totally agree with that!

upvoted 0 times

...

Glenna

4 months ago

The host is moved to a default isolation VLAN.

upvoted 0 times

...

My

4 months ago

I believe the host gets moved to a default isolation VLAN, but I need to double-check my notes on this.

upvoted 0 times

...

Pamella

4 months ago

I'm a bit confused about this one. I feel like it could either be moved to VLAN 111 or just disabled.

upvoted 0 times

...

Miesha

4 months ago

I remember practicing a similar question, and I think the answer was that no VLAN change is performed.

upvoted 0 times

...

Corinne

5 months ago

I think if a rogue host connects, it might get moved to a default isolation VLAN, but I'm not entirely sure.

upvoted 0 times

...

Nieves

5 months ago

This question is testing my knowledge of switch security features. I'll need to remember the typical behavior when dealing with rogue hosts - either isolating them in a separate VLAN or disabling the port. I'll review the options and choose the one that seems most likely.

upvoted 0 times

...

Latrice

5 months ago

Okay, let's think this through. If we're forcing registration of unknown hosts, then the switch should be configured to move them to a specific VLAN, either a dedicated isolation VLAN or a predefined VLAN like 111. I'll carefully consider the options and make my best guess.

upvoted 0 times

...

Theola

5 months ago

Hmm, I'm a bit unsure about this one. I know VLAN assignment is important for security, but I'm not sure which option is correct. I'll need to review my notes on rogue host handling.

upvoted 0 times

...

Marjory

5 months ago

This looks like a straightforward question about VLAN assignment for rogue hosts. I'll carefully read through the options and think about the expected behavior in this scenario.

upvoted 0 times

...

Rebbecca

5 months ago

Hmm, I'm a little confused here. There are a few different log files mentioned, and I'm not sure which one would be the best to check for information on a failed VMware Cloud Director deployment. I'll have to review the options again and try to think through the most logical place to look.

upvoted 0 times

...

Lashaun

9 months ago

Option D, disabling the host? What is this, the Dark Ages? I want my switches to be smart, not heavy-handed. Give me that isolation VLAN any day - B is the way to go, my friend.

upvoted 0 times

...

Raina

10 months ago

Alright, let's see here... If it's an unknown host, I'd expect the switch to take some action to isolate it. So I'm going to go with B, the default isolation VLAN. Seems like the most logical choice to me.

upvoted 0 times

Jeffrey

8 months ago

Default isolation VLAN seems like the right choice for handling unknown hosts.

upvoted 0 times

...

Jolene

9 months ago

I think the switch will move the host to a default isolation VLAN as well.

upvoted 0 times

...

Edna

9 months ago

I agree, isolating the unknown host in a default VLAN makes sense.

upvoted 0 times

...

Tamie

10 months ago

Ha! Disabling the host? That's a bit extreme, don't you think? I'd go with B, moving the host to an isolation VLAN. Keeps things nice and secure without shutting down the connection entirely.

upvoted 0 times

Edgar

9 months ago

User1: Exactly, no need to completely disable the host.

upvoted 0 times

...

Theodora

9 months ago

User2: Definitely, it's a good balance between security and functionality.

upvoted 0 times

...

Vivienne

9 months ago

User1: I agree, isolating the host seems like a better option.

upvoted 0 times

...

Rasheeda

10 months ago

Hmm, I'm not sure about this one. I guess it depends on how the switch is configured. Maybe the host gets moved to a specific VLAN or maybe it gets disabled. I'll have to think about this one a bit more.

upvoted 0 times