Priya Dogra – Certification | Jobs | Internships
Related Articles
Network Access Control (NAC) quiz answers
These are the answers to the Network Access Control (NAC) lesson quiz in Fortinet’s free Getting Started in Cybersecurity course, with a short explanation for every question. Getting Started in Cybersecurity is one of the two course options (with Technical Introduction to Cybersecurity) that, together with Introduction to the Threat Landscape, earns the Fortinet Certified Fundamentals (FCF) in Cybersecurity certification.
Course at a glance
- Provider: Fortinet Training Institute
- Cost: Free
- Course: Getting Started in Cybersecurity (15 short lessons, each with a quiz)
- Best for: Sales and non-technical roles that need a high-level view of security technology
- Counts toward: FCF in Cybersecurity (valid 2 years)
- Official course: training.fortinet.com
- Answers reviewed: November 2026
Fortinet updates its question banks from time to time. If you see a question that isn’t listed here, leave a comment with the question and we’ll add it.
Quiz questions and answers
Question 1: How does NAC effectively segment a network?
- Utilizing device profiles
- Using user roles
- Using IP addresses
- Routers
Why: NAC segments the network by device profile, deciding access based on what each device is.
Question 2: Which security challenge do BYODs pose to networks?
- Limited RAM prevents the installation of security software
- MIS does not control what is installed on these devices
- Increase the maintenance cycle for network devices
- Data exfiltration
Why: IT has no control over what is installed on employees’ personal devices.
Question 3: What drives organizations to buy IoT devices?
- Can save time and money
- Mandated by government
- Provide valuable data to the CFO
- Required as part of an air-gap solution
Why: Organisations buy IoT devices because they save time and money.
Question 4: Which three parties participate in network authentication, according to the IEEE 802.1X standards? (Choose three.)
- Router
- Client device
- Authentication server
- Authenticator
- Certification authority
Why: 802.1X authentication involves the client device (supplicant), the authenticator (switch or access point) and the authentication server.
Question 5: What action do you typically need to do to join a public network, such as one in a coffee shop?
- Agree to the legal terms for using the network
- Submit your personal digital certificate
- Register your handheld device
- Provide biometric information
Why: Public Wi-Fi usually only asks you to accept the network’s terms of use.
Question 6: Why are IoT devices potential conduits of contagion?
- Not able to install security software
- There are too many incompatible IoT security standards in use
- IoT devices are often cheaply made
- Does not support two-factor authentication
Why: Many IoT devices can’t run security software, so malware can spread through them.
Questions from the older NSE 2 version of this lesson
Fortinet’s earlier NSE 2 course asked these questions on the same topic. They are kept here in case your quiz still shows them.
Question 1: What is one characteristic of headless devices?
- Devices that are connected only to a wired network
- Devices that cannot take a 3rd party security agent
- Devices that have only AV software installed
- Devices that provide only centralized architecture
Why: Headless devices, such as many IoT devices, can’t run a third-party security agent.
Question 2: What are the three key activities performed by NAC? (Choose three.)
- Profile all devices to identify what access they should have
- Watch for IoT devices to respond to CNC servers in the Internet
- Provide appropriate network access to devices
- Discover all devices on the network
Why: NAC discovers every device, profiles it and then gives it the appropriate network access.
Question 3: Which three statements are advantages of implementing a FortiNAC solution? (Choose three.)
- The FortiNAC solution supports only wireless networks.
- The FortiNAC solution only supports BYOD environments.
- FortiNAC is integrated into the security framework.
- The FortiNAC solution has complete visibility into the network.
- FortiNAC can profile headless devices that are not equipped with an agent.
Why: FortiNAC is part of the Security Fabric, sees the whole network and can profile headless devices without an agent.
Question 4: What two security challenges do IoT devices present to IT security professionals? (Choose two.)
- They are time consuming to deploy.
- They often do not support security programs.
- They are frequently stolen.
- They can be exploited by bad actors.
Why: IoT devices often can’t run security programs and can be exploited by attackers.
Question 5: When NAC is first deployed, what is one of the first tasks it performs?
- Installs AV software
- Compares the signature of the file with a list of known virus signatures
- Configures the firewall
- Profiles all connected devices
Why: After deployment, NAC first discovers and profiles all connected devices.
Question 6: Which two network security concerns have grown dramatically for businesses in recent years? (Choose two.)
- Need for overall network visibility
- Malware protection requirements
- Need for AVs
- IoT devices connecting to a network
Why: Businesses increasingly need full network visibility as more IoT devices connect.
Question 7: What is one shortcoming of NAC solutions?
- NAC solutions do not support BYOD environments.
- NAC solutions support only endpoint security.
- Some NAC solutions underperform in wired environments, creating a security vulnerability.
- NAC solutions do not support IoT devices.
Why: According to the course, some NAC solutions perform poorly on wired networks, which leaves a security gap.
All Getting Started in Cybersecurity quiz answers
- Endpoint Monitoring quiz answers
- Firewalls quiz answers
- Zero Trust Network Access (ZTNA) quiz answers
- Endpoint Hardening Techniques quiz answers
- Content Filters quiz answers
- SIEM quiz answers
- SOAR quiz answers
- Sandbox quiz answers
- Web Application Firewall (WAF) quiz answers
- SASE quiz answers
- Secure Email Gateway quiz answers
- Network Access Control (NAC) (this page)
- Cloud Service Models quiz answers
- Wi-Fi quiz answers
- SD-WAN quiz answers
Frequently asked questions
Is Getting Started in Cybersecurity free?
Yes. It is free on the Fortinet Training Institute website; you only need a free account.
What is the difference between Getting Started and Technical Introduction to Cybersecurity?
Getting Started in Cybersecurity is a high-level course for sales and non-technical roles. Technical Introduction to Cybersecurity goes deeper and suits people heading into technical IT or security jobs. Either one, plus Introduction to the Threat Landscape, earns the FCF certification.
Did the old Fortinet NSE 2 course change?
Yes. Fortinet replaced the NSE 1–3 courses with the FCF curriculum. Many NSE 2 lesson topics now appear in Getting Started in Cybersecurity, which is why this page includes both the current and the older questions.
2 comments
Pingback: Fortinet SASE Quiz Answers Explained | Priya Dogra
Pingback: Fortinet Getting Started in Cybersecurity Quiz Answers | Priya Dogra