Refer to the exhibit. Based on the settings shown in the exhibit, which two actions must the administrator take to make the endpoint compliant? (Choose two.)

Patch applications that have vulnerability rated as high or above

Run Calculator application on the endpoint

Integrate FortiSandbox for infected file analysis

Patch applications that have vulnerability rated as high or above

Run Calculator application on the endpoint

What action does FortiClient anti-exploit detection take when it detects exploits?

Terminates the compromised application process

Blocks memory allocation to the compromised application process

Patches the compromised application process

Deletes the compromised application process

Refer to the exhibit. Which shows multiple endpoint policies on FortiClient EMS.Which policy is applied to the endpoint in the AD group trainingAD?

Both the Sales and Training policies because their priority is higher than the Default policy

The Default policy because it has the highest priority

Refer to the exhibit. Based on the FortiClient log details shown in the exhibit, which two statements are true? (Choose two.)

The filename is Unconfirmed 899290 .crdownload.

The filename is sent to ForuSandbox for further inspection.

The file location IS \??\D:\Users\.

Refer to the exhibit. Based on the logs shown in the exhibit, why did FortiClient EMS fail to install FortiClient on the endpoint?

The task scheduler service is not running.

The remote registry service is not running

The Windows installer service is not running

The task scheduler service is not running.

The FortiClient antivirus service is not running

A new chrome book is connected in a school's network.Which component can the EMS administrator use to manage the FortiClient web filter extension installed on the Google Chromebook endpoint?

FortiClient web filter extension

An administrator configures ZTNA configuration on the FortiGate for remote users. Which statement is true about the firewall policy?

It redirects the client request to the access proxy

It applies security profiles to protect traffic

Why does FortiGate need the root CA certificate of FortiClient EMS?

To trust certificates issued by FortiClient EMS

To sign FortiClient CSR requests

To revoke FortiClient client certificates

To trust certificates issued by FortiClient EMS

To update FortiClient client certificates

Which two statements are true about ZTNA? (Choose two.)

ZTNA provides role-based access

ZTNA provides a security posture check

ZTNA provides role-based access

ZTNA manages access for remote users only

ZTNA manages access through the client only

ZTNA provides a security posture check

An administrator is required to maintain a software vulnerability on the endpoints, without showing the feature on the FortiClient dashboard. What must the administrator do to achieve this requirement?

Click the hide icon on the vulnerability scan tab

Disable select the vulnerability scan feature in the deployment package

Use the default endpoint profile

Select the vulnerability scan feature in the deployment package, but disable the feature on the endpoint profile

Click the hide icon on the vulnerability scan tab

Refer to the exhibit. Which shows FortiClient EMS deployment profiles.When an administrator creates a deployment profile on FortiClient EMS, which statement about the deployment profile is true?

Deployment-2 will upgrade FortiClient on both the AD group and workgroup

Deployment-1 will install FortiClient on new AD group endpoints

Deployment-2 will install FortiClient on both the AD group and workgroup

Deployment-2 will upgrade FortiClient on both the AD group and workgroup

Deployment-1 will upgrade FortiClient only on the workgroup

An administrator needs to connect FortiClient EMS as a fabric connector to FortiGate. What is the prerequisite to get FortiClient EMS to connect to FortiGate successfully?

Import and verify the FortiClient EMS root CA certificate on FortiGate

Revoke and update the FortiClient EMS root CA.

Revoke and update the FortiClient client certificate on EMS.

Import and verify the FortiClient client certificate on FortiGate.

Import and verify the FortiClient EMS root CA certificate on FortiGate

Refer to the exhibit. <a target='_blank' href='http://www.facebook.com/'>Based on the settings shown in the exhibit, which action will FortiClient take when users try to access www.facebook.com?</a>

FortiClient will allow access to Facebook

FortiClient will monitor only the user's web access to the Facebook website

FortiClient will block access to Facebook and its subdomains.

FortiClient will prompt a warning message to warn the user before they can access the Facebook website

Refer to the exhibit. Which shows the output of the ZTNA traffic log on FortiGate.What can you conclude from the log message?

The remote user connection does not match the ZTNA rule configuration.

The remote user connection does not match the explicit proxy policy.

The remote user connection does not match the ZTNA server configuration.

The remote user connection does not match the ZTNA rule configuration.

The remote user connection does not match the ZTNA firewall policy

Refer to the exhibits. Which show the Zero Trust Tag Monitor and the FortiClient GUI status.Remote-Client is tagged as Remote-Users on the FortiClient EMS Zero Trust Tag Monitor.What must an administrator do to show the tag on the FortiClient GUI?

Change the FortiClient system settings to enable tag visibility

Update tagging rule logic to enable tag visibility

Change the FortiClient system settings to enable tag visibility

Change the endpoint control setting to enable tag visibility

Change the user identity settings to enable tag visibility

What is the function of the quick scan option on FortiClient?

It scans executable files, DLLs, and drivers that are currently running, for threats.

It scans programs and drivers that are currently running, for threats.

It allows users to select a specific file folder on their local hard disk drive (HDD), to scan for threats.

It performs a full system scan including all files, executable files, DLLs, and drivers for threats.

When site categories are disabled in FortiClient webfilter and antivirus (malicious websites), which feature can be used to protect the endpoint from malicious web access?

Block malicious websites on antivirus

Which two benefits are benefits of using multi-tenancy mode on FortiClient EMS? (Choose two.)

It provides granular access and segmentation.

Licenses are shared among sites.

The fabric connector must use an IP address to connect to FortiClient EMS

It provides granular access and segmentation.

Licenses are shared among sites.

Separate host servers manage each site.

Which two statements are true about the ZTNA rule? (Choose two. )

It applies security profiles to protect traffic

It redirects the client request to the access proxy

It applies security profiles to protect traffic

Refer to the exhibit. Based on the CLI output from FortiGate. which statement is true?

FortiGate is configured to pull user groups from FortiClient EMS

FortiGate is configured with local user group

FortiGate is configured to pull user groups from FortiAuthenticator

FortiGate is configured to pull user groups from AD Server.

Refer to the exhibit. Based on the settings shown in the exhibit what action will FortiClient take when it detects that a user is trying to download an infected file?

Allows the infected file to download without scan

Blocks the infected files as it is downloading

Quarantines the infected files and logs all access attempts

Sends the infected file to FortiGuard for analysis

Allows the infected file to download without scan

An administrator deploys a FortiClient installation through the Microsoft AD group policy After installation is complete all the custom configuration is missing.What could have caused this problem?

The FortiClient package is not assigned to the group

The FortiClient exe file is included in the distribution package

The FortiClient MST file is missing from the distribution package

FortiClient does not have permission to access the distribution package.

The FortiClient package is not assigned to the group

Refer to the exhibits. Based on the FortiGate Security Fabric settings shown in the exhibits, what must an administrator do on the EMS server to successfully quarantine an endpoint. when it is detected as a compromised host (loC)?

The administrator must enable remote HTTPS access to EMS.

The administrator must enable FQDN on EMS.

The administrator must authorize FortiGate on FortiAnalyzer.

The administrator must enable SSH access to EMS.

Which statement about FortiClient comprehensive endpoint protection is true?

lt helps to safeguard systems from advanced security threats, such as malware.

It helps to safeguard systems from email spam

It helps to safeguard systems from data loss.

It helps to safeguard systems from DDoS.

lt helps to safeguard systems from advanced security threats, such as malware.

Refer to the exhibit. Based on the Security Fabric automation settings, what action will be taken on compromised endpoints?

Endpoints will be quarantined through EMS

Endpoints will be banned on FortiGate

An email notification will be sent for compromised endpoints

Endpoints will be quarantined through FortiSwitch

In a FortiSandbox integration, what does the remediation option do?

Wait for FortiSandbox results before allowing files

Deny access to a file when it sees no results

Refer to the exhibit. An administrator has restored the modified XML configuration file to FortiClient and sees the error shown in the exhibit.Based on the XML settings shown in the exhibit, what must the administrator do to resolve the issue with the XML configuration file?

The administrator must resolve the XML syntax error.

The administrator must use a password to decrypt the file

The administrator must change the file size

The administrator must save the file as FortiClient-config conf.

An administrator is required to maintain a software inventory on the endpoints. without showing the feature on the FortiClient dashboard What must the administrator do to achieve this requirement?

The administrator must click the hide icon on the vulnerability scan tab

The administrator must use default endpoint profile

The administrator must not select the vulnerability scan feature in the deployment package.

The administrator must select the vulnerability scan feature in the deployment package, but disable the feature on the endpoint profile

The administrator must click the hide icon on the vulnerability scan tab

Fortinet NSE5_FCT-7.0 Practice Test 1 - Free Online Exam Prep & Questions

Question 1 / 40

Refer to the exhibits.

Fortinet NSE5_FCT-7.0 image Question 1 26425 09182024190412000000

Which shows the configuration of endpoint policies.

Based on the configuration, what will happen when someone logs in with the user account student on an endpoint in the trainingAD domain?

FortiClient EMS will assign the Sales policy

FortiClient EMS will assign the Training policy

FortiClient EMS will assign the Default policy

FortiClient EMS will assign the Training policy for on-fabric endpoints and the Sales policy for the off-fabric endpoint

Comment (0)

Fortinet NSE5_FCT-7.0 Practice Test 1

Question

Fortinet NSE5_FCT-7.0 Practice Tests

Practice Tests