[UPDATED 2026] NSE5_FNC_AD_7.6 dumps Free Test Engine Verified By Certified Experts
Realistic NSE5_FNC_AD_7.6 Accurate & Verified Answers As Experienced in the Actual Test!
Fortinet NSE5_FNC_AD_7.6 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 5 |
|
NEW QUESTION # 19
Refer to the exhibit.
A FortiNAC-F N+1 HA configuration is shown.
What will occur if CA-2 fails?
- A. CA-3 will be promoted to a primary and share management responsibilities with CA-1.
- B. CA-1 and CA-3 will operate as a 1+1 HA cluster with CA-3 acting as a hot standby.
- C. CA-3 will be promoted to a primary and FortiNAC-F manager will load balance between CA-1 and CA-3.
- D. CA-3 will continue to operate as a secondary in an N+1 HA configuration.
Answer: D
Explanation:
In an N+1 High Availability (HA) configuration, a single secondary Control and Application (CA) server provides backup for multiple primary CA servers. The FortiNAC-F Manager (FortiNAC-M) acts as the centralized orchestrator for this cluster, monitoring the health of all participating nodes.
According to the FortiNAC-F 7.6.0 N+1 Failover Reference Manual, when a primary CA (such as CA-2 in the exhibit) fails, the secondary CA (CA-3) is automatically promoted by the Manager to take over the specific workload and database functions of that failed primary. Crucially, the documentation specifies that even after this promotion, the system architecture maintains its N+1 logic. The secondary CA effectively "assumes the identity" of the failed primary while continuing to operate within the N+1 framework established by the Manager.
It does not merge with CA-1 to form a traditional 1+1 active/passive cluster (A), nor does it engage in load balancing (D), as FortiNAC-F HA is designed for redundancy and failover rather than active traffic distribution. Furthermore, CA-3 does not "share" management with CA-1 (C); it independently handles the tasks originally assigned to CA-2. Throughout this failover state, the Manager continues to oversee the group, and CA-3 remains the designated secondary unit currently acting in a primary capacity for the downed node until CA-2 is restored.
"In an N+1 Failover Group, the Secondary CA is designed to take over the functionality of any single failed primary component within the group. The FortiNAC Manager monitors the primaries and initiates the failover to the secondary... Once failover occurs, the secondary continues to operate as the backup unit for the failed primary while remaining part of the managed N+1 HA configuration." - FortiNAC-F 7.6.0 N+1 Failover Reference Manual: Failover Behavior Section.
NEW QUESTION # 20
What must an administrator configure to allow FortiNAC-F to process incoming syslog messages that are not supported by default?
- A. A Security Event Parser
- B. A Security Action
- C. A Log Receiver
- D. A Syslog Service Connector
Answer: A
Explanation:
FortiNAC-F provides a robust engine for processing security notifications from third-party devices. For standard integrations, such as FortiGate or Check Point, the system comes pre-loaded with templates to interpret incoming data. However, when an administrator needs FortiNAC-F to process syslog messages from a vendor or device that is not supported by default, they must configure a Security Event Parser.
The Security Event Parser acts as the translation layer. It uses regular expressions (Regex) or specific field mappings to identify key data points within a raw syslog string, such as the source IP address, the threat type, and the severity. Without a parser, FortiNAC-F may receive the syslog message but will be unable to "understand" its contents, meaning it cannot generate the necessary Security Event required to trigger automated responses. Once a parser is created, the system can extract the host's IP address from the message, resolve it to a MAC address via L3 polling, and then apply the appropriate security rules. This allows for the integration of any security appliance capable of sending RFC-compliant syslog messages.
"FortiNAC parses the information based on pre-defined security event parsers stored in FortiNAC's database... If the incoming message format is not recognized, a new Security Event Parser must be created to define how the system should extract data fields from the raw syslog message. This enables FortiNAC to generate a security event and take action based on the alarm configuration." - FortiNAC-F Administration Guide: Security Event Parsers.
NEW QUESTION # 21
An administrator wants FortiNAC-F to return a group of user-defined RADIUS attributes in RADIUS responses.
Which condition must be true to achieve this?
- A. The device models in the inventory view must be configured for proxy-based authentication.
- B. RADIUS accounting must be enabled on the FortiNAC-F RADIUS server configuration.
- C. Inbound RADIUS requests must contain the Calling-Station-ID attribute.
- D. The requesting device must support RFC 5176.
Answer: C
Explanation:
In FortiNAC-F, the RADIUS Attribute Groups feature allows administrators to return customized RADIUS attributes (such as specific VLAN IDs, filter IDs, or vendor-specific attributes) in an Access-Accept packet sent back to a network device. This is particularly useful for supporting "Generic RADIUS" devices that are not natively supported but can be managed using standard AVPairs.
According to the FortiNAC-F Generic RADIUS Wired Cookbook and the RADIUS Attribute Groups section of the Administration Guide, there is one critical prerequisite for this feature to function: the inbound RADIUS request must contain the Calling-Station-ID attribute. The Calling-Station-ID typically contains the MAC address of the connecting endpoint. Because FortiNAC-F is a host-centric system, it uses the MAC address as the unique identifier to look up the host record, evaluate the associated Network Access Policy, and determine which Logical Network (and thus which Attribute Group) should be applied. If the incoming request lacks this attribute, FortiNAC-F cannot reliably identify the host and, as a safety mechanism, will not include any user-defined RADIUS attributes in the response. This ensures that unauthorized or unidentifiable devices do not receive privileged access through misapplied attributes.
"Configure a set of attributes that must be included in the RADIUS Access-Accept packet returned by FortiNAC... Requirement: Inbound RADIUS request must contain Calling-Station-Id. Otherwise, FortiNAC will not include the RADIUS attributes. This attribute is used to identify the host and its current state within the FortiNAC database." - FortiNAC-F 7.6.0 Generic RADIUS Wired Cookbook: Configure RADIUS Attribute Groups.
NEW QUESTION # 22
A network administrator is troubleshooting a network access issue for a specific host. The administrator suspects the host is being assigned a different network access policy than expected.
Where would the administrator look to identify which network access policy, if any, is being applied to a particular host?
- A. The Policy Details view for the host
- B. The Connections view
- C. The Port Properties view of the hosts port
- D. The Policy Logs view
Answer: A
Explanation:
When troubleshooting network access in FortiNAC-F, it is often necessary to verify exactly why a host has been granted a specific level of access. Since FortiNAC-F evaluates policies from the top down and assigns access based on the first match, an administrator needs a clear way to see the results of this evaluation for a specific live endpoint.
The Policy Details (C) view is the designated tool for this purpose. By navigating to the Hosts > Hosts (or Adapter View) in the Administration UI, an administrator can search for the specific MAC address or IP of the host in question. Right-clicking on the host record reveals a context menu from which Policy Details can be selected. This view provides a real-time "look" into the policy engine's decision for that specific host, showing the Network Access Policy that was matched, the User/Host Profile that triggered the match, and the resulting Network Access Configuration (VLAN/ACL) currently applied.
While Policy Logs (A) provide a historical record of all policy transitions across the system, they are often too high-volume to efficiently find a single host's current state. The Connections view (B) shows the physical port and basic status but lacks the granular policy logic breakdown. The Port Properties (D) view shows the configuration of the switch interface itself, which is only one component of the final access determination.
"To identify which policy is currently applied to a specific endpoint, use the Policy Details view. Navigate to Hosts > Hosts, select the host, right-click and choose Policy Details. This window displays the specific Network Access Policy, User/Host Profile, and Network Access Configuration currently in effect for that host record." - FortiNAC-F Administration Guide: Policy Details and Troubleshooting.
NEW QUESTION # 23
Refer to the exhibit.
If a host is connected to a port in the Building 1 First Floor Ports group, what must also be true to match this user/host profile?
- A. The host must have a role value of contractor, an installed persistent agent or a security access value of contractor, and be connected between 6 AM and 5 PM.
- B. The host must have a role value of contractor or an installed persistent agent, a security access value of contractor, and be connected between 9 AM and 5 PM.
- C. The host must have a role value of contractor or an installed persistent agent or a security access value of contractor, and be connected between 6 AM and 5 PM.
- D. The host must have a role value of contractor or an installed persistent agent and a security access value of contractor, and be connected between 6 AM and 5 PM.
Answer: D
Explanation:
The User/Host Profile in FortiNAC-F is the fundamental logic engine used to categorize endpoints for policy assignment. As seen in the exhibit, the configuration uses a combination of Boolean logic operators (OR and AND) to define the "Who/What" attributes.
According to the FortiNAC-F Administrator Guide, attributes grouped together within the same bracket or connected by an OR operator require only one of those conditions to be met. In the exhibit, the first two attributes are "Host Role = Contractor" OR "Host Persistent Agent = Yes". This forms a single logical block. This block is then joined to the third attribute ("Host Security Access Value = Contractor") by an AND operator. Consequently, a host must satisfy at least one of the first two conditions AND satisfy the third condition to match the "Who/What" section.
Furthermore, the profile includes Location and When (time) constraints. The exhibit shows the location is restricted to the "Building 1 First Floor Ports" group. The "When" schedule is explicitly set to Mon-Fri 6:00 AM - 5:00 PM. For a profile to match, all enabled sections (Who/What, Locations, and When) must be satisfied simultaneously. Therefore, the host must meet the conditional contractor/agent criteria, possess the specific security access value, and connect during the defined 6 AM to 5 PM window.
"User/Host Profiles use a combination of attributes to identify a match. Attributes joined by OR require any one to be true, while attributes joined by AND must all be true. If a Schedule (When) is applied, the host must also connect within the specified timeframe for the profile to be considered a match. All criteria in the Who/What, Where, and When sections are cumulative." - FortiNAC-F Administration Guide: User/Host Profile Configuration.
NEW QUESTION # 24
A network administrator is troubleshooting a network access issue for a specific host. The administrator suspects the host is being assigned a different network access policy than expected.
Where would the administrator look to identify which network access policy, if any, is being applied to a particular host?
- A. The Policy Details view for the host
- B. The Connections view
- C. The Port Properties view of the hosts port
- D. The Policy Logs view
Answer: A
Explanation:
When troubleshooting network access in FortiNAC-F, it is often necessary to verify exactly why a host has been granted a specific level of access. Since FortiNAC-F evaluates policies from the top down and assigns access based on the first match, an administrator needs a clear way to see the results of this evaluation for a specific live endpoint.
The Policy Details (C) view is the designated tool for this purpose. By navigating to the Hosts > Hosts (or Adapter View) in the Administration UI, an administrator can search for the specific MAC address or IP of the host in question. Right-clicking on the host record reveals a context menu from which Policy Details can be selected. This view provides a real-time "look" into the policy engine's decision for that specific host, showing the Network Access Policy that was matched, the User/Host Profile that triggered the match, and the resulting Network Access Configuration (VLAN/ACL) currently applied.
While Policy Logs (A) provide a historical record of all policy transitions across the system, they are often too high-volume to efficiently find a single host's current state. The Connections view (B) shows the physical port and basic status but lacks the granular policy logic breakdown. The Port Properties (D) view shows the configuration of the switch interface itself, which is only one component of the final access determination.
"To identify which policy is currently applied to a specific endpoint, use the Policy Details view. Navigate to Hosts > Hosts, select the host, right-click and choose Policy Details. This window displays the specific Network Access Policy, User/Host Profile, and Network Access Configuration currently in effect for that host record." - FortiNAC-F Administration Guide: Policy Details and Troubleshooting.
NEW QUESTION # 25
Refer to the exhibits.
Based on the given configurations and settings, on which date and time would a guest account created at 8:00 AM on 2025/09/12 expire?
- A. 2025/09/12 at 17:00:00
- B. 2025/09/12 at 8:00 PM
- C. 2025/09/13 at 17:00:00
- D. 2025/09/12 at 7:00 PM
Answer: C
Explanation:
Questio ns no: 22
Verified Answe r: D
Comprehensive and Detailed 250 to 300 words each Explanation with Exact Matched Extract from FortiNAC-F Administrator library and documentation for current versions (including F 7.2, 7.4, and 7.6) documents:
In FortiNAC-F, the expiration of a guest or contractor account is determined by the configuration settings within the Account Creation Wizard and the associated Guest/Contractor Template. While a template can define a default "Account Duration" (as seen in the 12-hour setting in the second exhibit), the Account Creation Wizard allows an administrator to manually specify or override the start and end parameters for a specific user session.
According to the FortiNAC-F Administration Guide regarding guest management, the Account End Date field in the creation wizard is the definitive timestamp for when the account object will be disabled or deleted from the system. In the provided exhibit (Account Creation Wizard), the administrator has explicitly set the Account Start Date to 2025/09/12 08:00:00 and the Account End Date to 2025/09/13 17:00:00.
Even though the template indicates an "Account Duration" of 12 hours, this value typically serves as a pre-populated default. When a manual date and time are entered into the wizard, those specific values take precedence for that individual account. The account will remain active and valid until 5:00 PM (17:00:00) on the following day, 2025/09/13. It is also important to note the "Login Availability" from the template (8:00 AM - 7:00 PM); while the account exists until the 13th at 17:00:00, the user would only be able to authenticate during the active hours defined by the login schedule on both days.
"When creating an account, the administrator can select a template to provide default settings. However, specific values such as the Account End Date can be modified within the Account Creation Wizard. The date and time specified in the 'Account End Date' field determines the absolute expiration of the account. Once this time is reached, the account is moved to an expired state and the user's network access is revoked." - FortiNAC-F Administration Guide: Guest and Contractor Account Management.
NEW QUESTION # 26
When configuring isolation networks in the configuration wizard, why does a layer 3 network typo allow for mora than ono DHCP scope for each isolation network typo?
- A. Configuring more than one DHCP scope allows for DHCP server redundancy
- B. Any scopes beyond the first scope are used if the initial scope runs out of IP addresses.
- C. There can be more than one isolation network of each type
- D. The layer 3 network type allows for one scope for each possible host status.
Answer: C
Explanation:
In FortiNAC-F, the Layer 3 Network type is specifically designed for deployments where the isolation networks-such as Registration, Remediation, and Dead End-are separated from the FortiNAC appliance's service interface (port2) by one or more routers. This architecture is common in large, distributed enterprise environments where endpoints in different physical locations or branches must be isolated into subnets that are local to their respective network equipment.
The reason the Configuration Wizard allows for more than one DHCP scope for a single isolation network type (state) is that there can be more than one isolation network of each type across the infrastructure. For instance, if an organization has three different sites, each site might require its own unique Layer 3 registration subnet to ensure efficient routing and to accommodate local IP address management. By allowing multiple scopes for the "Registration" state, FortiNAC can provide the appropriate IP address, gateway, and DNS settings to a rogue host regardless of which site's registration VLAN it is placed into.
When an endpoint is isolated, the network infrastructure (via DHCP Relay/IP Helper) directs the DHCP request to the FortiNAC service interface. FortiNAC then identifies which scope to use based on the incoming request's gateway information. This flexibility ensures that the system is not limited to a single flat subnet for each isolation state, supporting a scalable, multi-routed network topology.
"Multiple scopes are allowed for each isolation state (Registration, Remediation, Dead End, VPN, Authentication, Isolation, and Access Point Management). Within these scopes, multiple ranges in the lease pool are also permitted... This configWizard option is used when Isolation Networks are separated from the FortiNAC Appliance's port2 interface by a router." - FortiNAC-F Configuration Wizard Reference Manual: Layer 3 Network Section.
NEW QUESTION # 27
When creating a device profiling rule, what are two advantages of registering the device in the host view? (Choose two.)
- A. The devices can be associated with a user.
- B. The devices can be polled for connection status.
- C. The devices can be managed as a generic SNMP device.
- D. The devices will have connection logs.
Answer: A,D
Explanation:
In FortiNAC-F, the Device Profiler is a rule-based engine that evaluates unknown "rogue" devices and classifies them based on fingerprints and behavior. When a profiling rule matches a device, the administrator can configure the rule to automatically register that device. The registration process can place the device record in two primary locations: the Topology View (as a device) or the Host View (as a registered host).
According to the FortiNAC-F Administration Guide, registering a device in the Host View provides significant advantages for identity management and historical tracking. First, the devices can be associated with a user (C). In the FortiNAC database architecture, the Host View is the primary repository for endpoint identity; placing a profiled device here allows the system to link that hardware (MAC address) to a specific user account, whether that user is an employee, guest, or a system-level "owner". This association is essential for Role-Based Access Control (RBAC) and for tracking accountability across the network fabric.
Second, devices registered in the Host View will have connection logs (B). FortiNAC-F maintains a detailed operational history for all host records, including every instance of the device connecting to or disconnecting from a port, its IP address assignments, and the specific policies applied during each session. These logs are invaluable for troubleshooting connectivity issues and for security forensic audits, as they provide a clear timeline of the device's lifecycle on the network. In contrast, devices managed only in the Topology View are typically treated as infrastructure components where the focus is on device availability rather than individual session history.
"Devices that are registered and associated with a user are placed in the Host View and removed from the Profiled Devices window... Placing a device in the Host View allows for the tracking of connection history and the association of the device with a specific identity or user record within the FortiNAC database." - FortiNAC-F Administration Guide: Device Profiler How it Works.
NEW QUESTION # 28
An administrator has created several device profiling rules and evaluated all existing devices in the database. Some of the devices appear in the profiled devices view because they matched a rule, but they remain unknown and the registration column in the profiled devices view shows "No".
What is the most likely cause?
- A. The device profiling rule has registration set to manual.
- B. The confirm device profiling rule option is not enabled.
- C. The devices match more than one device profiling rule.
- D. The devices have persistent agents installed, and the point of connection has PA optimization enabled.
Answer: B
Explanation:
In FortiNAC-F, Device Profiling Rules are used to automatically identify and categorize devices (such as IP cameras, printers, or IoT devices) based on fingerprints like DHCP fingerprints, OIDs, or MAC prefixes. When a device matches a rule, it appears in the Profiled Devices view.
However, matching a rule does not automatically register the device in the database unless the rule is configured to do so. If the devices appear in the view but remain "Unknown" and show "No" in the registration column, it indicates that the "Confirm" (or "Auto-register") action has not been triggered. In the Device Profiling Rule configuration, there is a setting called "Allow Auto-Approval" or "Confirm". If this is not enabled, the system identifies the device but waits for an administrator to manually approve the match before changing the host status from "Unknown" to "Registered".
This is a common "safety" configuration used during the initial deployment phase to ensure that the profiling rules are accurate before the system begins automatically granting network access based on those matches.
"If a device matches a rule but is not registered, check the rule configuration. The Confirm option (within the Method or Rule settings) determines if the system automatically registers the device upon a match. If Confirm is not enabled, the device will remain in the 'Profiled' state with a registration status of 'No' until an administrator manually promotes the device." - FortiNAC-F Administration Guide: Device Profiling Rules.
NEW QUESTION # 29
Refer to the exhibit.
An administrator wants to use FortiNAC-F to automatically provision printers throughout their organization. Each building uses its own local VLAN for printers.
Which FortiNAC-F feature would allow this to be accomplished with a single network access policy?
- A. Preferred VLAN designations
- B. Device profiling rules
- C. Logical networks
- D. Dynamic host groups
Answer: C
Explanation:
The FortiNAC-F Logical Network feature is specifically designed to provide an abstraction layer between high-level security policies and the underlying physical network infrastructure. In large-scale deployments where different physical locations (like Building 1, 2, and 3 in the exhibit) use different local VLAN IDs for the same type of device (e.g., VLAN 10, 20, and 30 for printers), managing separate policies for each building would create significant administrative overhead.
By using a Logical Network, an administrator can create a single entity-for example, a logical network named "Printers"-and use it as the "Access Value" in a single Network Access Policy. The mapping of this logical label to a specific physical VLAN occurs at the Model Configuration level for each network device. When a printer connects to a switch in Building 1, FortiNAC-F evaluates the policy, identifies that the printer should be in the "Printers" logical network, and checks the Model Configuration for that specific switch to see which VLAN ID is mapped to that label (VLAN 10). If the same printer moves to Building 3, the same single policy applies, but FortiNAC-F provisions it to VLAN 30 based on the local mapping for that building's switch.
This architectural approach ensures that policies remain consistent and easy to manage regardless of the complexity or variations in the local network topology.
"Logical Networks provide a way to define a network access requirement once and apply it across many different network devices that may use different VLAN IDs for that access... Each managed device can use different VLAN IDs for the same Logical Network label. You can define the Logical Networks based on requirements and then associate the network to a VLAN ID when the managed device is configured in the Model Configuration." - FortiNAC-F IoT Deployment Guide: Define the Logical Networks.
NEW QUESTION # 30
A healthcare organization is integrating FortiNAC-F with its existing MDM. Communication is failing between the systems.
What could be a probable cause?
- A. SOAP API communication is failing
- B. REST API communication is failing
- C. SSH communication is failing
- D. Security Fabric traffic is failing
Answer: B
Explanation:
The integration between FortiNAC-F and Mobile Device Management (MDM) platforms (such as Microsoft Intune, VMware Workspace ONE, or Jamf) is a critical component for providing visibility into mobile assets that do not connect directly to the managed infrastructure via standard wired or wireless protocols.
According to the FortiNAC-F MDM Integration Guide, the communication between the FortiNAC-F appliance and the MDM server is handled through REST API calls. FortiNAC-F acts as an API client, periodically polling the MDM server to retrieve device metadata, compliance status, and ownership information. If communication is failing, it is most likely because the API credentials (Client ID/Secret) are incorrect, the MDM's API endpoint is unreachable from the FortiNAC-F service port, or the SSL certificate presented by the MDM is not trusted by the FortiNAC-F root store.
While SSH (B) is used for switch CLI management and the Security Fabric (A) uses proprietary protocols for FortiGate synchronization, neither is the primary vehicle for MDM data exchange. SOAP API (D) is an older protocol that has been largely replaced by REST in modern FortiNAC integrations.
"FortiNAC integrates with MDM systems by utilizing REST API communication to query the MDM database for device information. To establish this link, administrators must configure the MDM Service Connector with the appropriate API URL and authentication credentials. If the 'Test Connection' fails, verify that the FortiNAC can reach the MDM provider via the REST API port (usually HTTPS 443)." - FortiNAC-F Administration Guide: MDM Integration and Troubleshooting.
NEW QUESTION # 31
An administrator wants to build device profiling rules based on network traffic, but the network session view is not populated with any records.
Which two settings can be enabled to gather network session information? (Choose two.)
- A. Layer 3 polling on the infrastructure devices
- B. Firewall session polling on modeled FortiGate devices
- C. Network traffic polling on any modeled infrastructure device
- D. Netflow setting on the FortiNAC-F interfaces
Answer: B,D
Explanation:
In FortiNAC-F, the Network Sessions view provides a real-time and historical log of traffic flows, including source/destination IP addresses, ports, and protocols. This data is essential for building Device Profiling Rules that rely on "Traffic Patterns" or "Network Footprints" to identify devices (e.g., an IP camera communicating with its specific NVR). If the network session view is empty, the system is not receiving the necessary flow or session data from the network infrastructure.
According to the FortiNAC-F Administration Guide, there are two primary methods to populate this view:
NetFlow/sFlow/IPFIX (C): FortiNAC-F can act as a flow collector. By enabling NetFlow settings on the FortiNAC-F service interface (port2/eth1) and configuring your switches or routers to export flow data to the FortiNAC IP, the system can parse these packets and record sessions.
Firewall Session Polling (B): For environments with FortiGate firewalls, FortiNAC-F can proactively poll the FortiGate via the REST API to retrieve its current session table. This is particularly useful as it provides session visibility without requiring the overhead of configuring NetFlow on every access layer switch.
Settings like Layer 3 Polling (D) only provide ARP table mappings (IP to MAC correlation) and do not provide the detailed flow information required for the session view.
"The Network Sessions view displays information regarding active and inactive network traffic sessions... To populate this view, FortiNAC must receive data through one of the following methods: * NetFlow/sFlow Support: Configure network devices to send flow data to the FortiNAC service interface. * Firewall Session Polling: Enable session polling on modeled FortiGate devices to retrieve session information via API. These records are then used by the Device Profiler to match rules based on traffic patterns." - FortiNAC-F Administration Guide: Network Sessions and Flow Data Collection.
NEW QUESTION # 32
While discovering network infrastructure devices, a switch appears in the inventory topology with a question mark (?) on the icon. What would cause this?
- A. SNMP is not enabled on the switch.
- B. The wrong SNMP community string was entered during discovery.
- C. The SNMP ObjectlD is not recognized by FortiNAC-F.
- D. A read-only SNMP community siring was used.
Answer: C
Explanation:
In FortiNAC-F, the Inventory topology uses specific icons to represent the status and model of discovered network infrastructure. When a switch or other network device is discovered via SNMP, FortiNAC-F retrieves its System ObjectID (sysObjectID) to identify the specific make and model. This OID is then compared against the internal database of supported device mappings.
A question mark (?) icon appearing on a discovered switch indicates that while the discovery process successfully communicated with the device (meaning SNMP credentials were correct), the SNMP ObjectID is not recognized or mapped in the current version of FortiNAC-F. This essentially means the device is "unsupported" by the current software out-of-the-box. Because the OID is unknown, FortiNAC-F does not know which CLI or SNMP command set to use for critical functions like L2 polling (host visibility) or VLAN switching (enforcement). To resolve this, an administrator can manually "Set Device Mapping" to a similar existing model or a "Generic SNMP Device" if only basic L3 visibility is required.
"Discovered devices displaying a '?' icon indicate the currently running version does not have a mapping for that device's System OID (device is not supported). Device mappings are used to manage the device by performing functions such as L2/L3 Polling, Reading, and Switching VLANs." - Fortinet Technical Tip: Options for devices unable to be modeled in Inventory.
NEW QUESTION # 33
......
Latest Fortinet NSE5_FNC_AD_7.6 Practice Test Questions: https://actualtests.testinsides.top/NSE5_FNC_AD_7.6-dumps-review.html