Fortinet Exam NSE6_FNC-7.2 Topic 2 Question 6 Discussion

Actual exam question for Fortinet's NSE6_FNC-7.2 exam

Question #: 6
Topic #: 2

An administrator is configuring FortiNAC to manage FortiGate VPN users. As part of the configuration, the administrator must configure a few FortiGate firewall policies.

What is the purpose of the FortiGate firewall policy that applies to unauthorized VPN clients?

ATo deny access to only the production DNS server

BTo allow access to only the FortiNAC VPN interface

CTo allow access to only the production DNS server

DTo deny access to only the FortiNAC VPN interface

Show Suggested Answer

Suggested Answer: B

by Ma at Jan 24, 2024, 08:39 PM

Limited Time Offer

25%

Off

Get Premium NSE6_FNC-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Dong

1 years ago

Yeah, I agree. Option B doesn't sound like it would be the correct purpose of this policy. I'm pretty sure the goal is to deny access to unauthorized clients, not allow them access to anything. Maybe the exam writers are trying to trick us with that one.

upvoted 0 times

...

Willow

1 years ago

Good point. I was thinking along the same lines, but I'm a bit unsure about option B. Does 'allow access to only the FortiNAC VPN interface' mean that unauthorized clients would be allowed to access the FortiNAC interface? That doesn't seem right.

upvoted 0 times

Zona

1 years ago

Option D makes sense too, as denying access to the VPN interface for unauthorized clients would be important

upvoted 0 times

...

Maryrose

1 years ago

D) To deny access to only the FortiNAC VPN interface

upvoted 0 times

...

Audria

1 years ago

I think option B might be the right choice because it specifies access to the VPN interface only

upvoted 0 times

...

Timothy

1 years ago

B) To allow access to only the FortiNAC VPN interface

upvoted 0 times

...

Selma

1 years ago

I agree, option A seems like the correct choice

upvoted 0 times

...

Chaya

1 years ago

C) To allow access to only the production DNS server

upvoted 0 times

...

Alfred

1 years ago

A) To deny access to only the production DNS server

upvoted 0 times

...

James

1 years ago

Exactly! I think the purpose of this policy is to deny access to unauthorized VPN clients, so they can't reach sensitive resources like the production DNS server. The question is asking specifically about that, so I'm leaning towards option A or D.

upvoted 0 times

...

Meaghan

1 years ago

This question seems straightforward, but I want to make sure I understand the purpose of this policy correctly. The key here is that it applies to unauthorized VPN clients, so the goal is to restrict their access, right?

upvoted 0 times

...