nerdexam
Fortinet

NSE4 · Question #270

Which of the following statements is correct regarding the NAC Quarantine feature?

The correct answer is C. NAC quarantine allows administrators to isolate clients whose network activity poses a security. The NAC quarantine feature allows administrators to isolate network clients whose activity poses a security risk or fails compliance checks, restricting their access to the main network.

Submitted by manish99· Apr 18, 2026Firewall Policies and Authentication

Question

Which of the following statements is correct regarding the NAC Quarantine feature?

Options

  • AWith NAC quarantine, files can be quarantined not only as a result of antivirus scanning, but also
  • BNAC quarantine does a client check on workstations before they are permitted to have
  • CNAC quarantine allows administrators to isolate clients whose network activity poses a security
  • DIf you chose the quarantine action, you must decide whether the quarantine type is NAC

How the community answered

(68 responses)
  • A
    3% (2)
  • B
    7% (5)
  • C
    88% (60)
  • D
    1% (1)

Why each option

The NAC quarantine feature allows administrators to isolate network clients whose activity poses a security risk or fails compliance checks, restricting their access to the main network.

AWith NAC quarantine, files can be quarantined not only as a result of antivirus scanning, but also

NAC quarantine focuses on network clients or devices, not on quarantining individual files, which is typically handled by antivirus or sandboxing solutions.

BNAC quarantine does a client check on workstations before they are permitted to have

While NAC does perform client checks, quarantine is the *action* taken when a client fails checks or is deemed a risk, not the checking process itself.

CNAC quarantine allows administrators to isolate clients whose network activity poses a securityCorrect

The primary purpose of Network Access Control (NAC) quarantine is to isolate non-compliant or suspicious clients by restricting their network access to a separate, controlled segment, thereby preventing them from posing a threat to the rest of the network.

DIf you chose the quarantine action, you must decide whether the quarantine type is NAC

This option incorrectly frames NAC quarantine as a type of quarantine to be chosen, rather than defining its purpose as an isolation mechanism for risky network clients.

Concept tested: FortiGate NAC Quarantine Purpose

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/603348/nac-policy

Topics

#NAC#Quarantine#Endpoint security#Network access control

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full NSE4 Practice