Fortinet NSE 6 - FortiNAC 8.5

FortiNAC uses SNMP (Simple Network Management Protocol) to gather information from network devices and manage them. RADIUS (Remote Authentication Dial-In User Service) is utilized for authentication, authorization, and accounting. CLI (Command Line Interface) is used to provide direct control and configuration of network infrastructure devices. These three methods are well-documented and commonly used in network management and security contexts.

Layer 2 polling of infrastructure devices is triggered by scheduled poll timings which allow regular checks, linkup and linkdown traps indicating changes in the connection status, and a failed Layer 3 poll which implies a fallback to a different polling method to gather necessary information.

MAC notification traps should be configured on all ports on the switch. This ensures that any changes in the MAC address table are detected and reported, regardless of the port type. Configuring traps on all ports provides comprehensive monitoring and enhanced network security.

The question asks which connecting endpoints are evaluated against all enabled device profiling rules. The correct answer is that all hosts are evaluated each time they connect to ensure accurate network security and management. This means every device, regardless of whether it is known, trusted, or rogue, is checked against the profiling rules to determine their status and appropriate access permissions.

A persistent agent is required in order to detect an added USB drive. This type of agent continuously monitors the system for any changes, such as the addition of USB drives, ensuring that such events are detected and logged accurately.