Home / Fortinet / NSE5_FCT-7.0

Fortinet NSE5_FCT-7.0 Practice Test - Questions Answers, Page 2

Question list

List of questions

Question 11

(0)

A FortiClient EMS administrator has enabled the compliance rule for the sales department. Which Fortinet device will enforce compliance with dynamic access control?

Question 12

(0)

An administrator configures ZTNA configuration on the FortiGate for remote users. Which statement is true about the firewall policy?

Question 13

(0)

An administrator wants to simplify remote access without asking users to provide user credentials. Which access control method provides this solution'?

Question 14

(0)

Why does FortiGate need the root CA certificate of FortiClient EMS?

Question 15

(0)

Which two statements are true about ZTNA? (Choose two.)

Question 16

(0)

What does FortiClient do as a fabric agent? (Choose two.)

Question 17

(0)

Which component or device shares ZTNA tag information through Security Fabric integration?

Question 18

(0)

An administrator is required to maintain a software vulnerability on the endpoints, without showing the feature on the FortiClient dashboard. What must the administrator do to achieve this requireme

Question 19

(0)

Refer to the exhibit. Which shows FortiClient EMS deployment profiles. When an administrator creates a deployment profile on FortiClient EMS, which statement about the deployment profile is true

Question 20

(0)

An administrator needs to connect FortiClient EMS as a fabric connector to FortiGate. What is the prerequisite to get FortiClient EMS to connect to FortiGate successfully?

Question 11

A FortiClient EMS administrator has enabled the compliance rule for the sales department. Which Fortinet device will enforce compliance with dynamic access control?

FortiClient

FortiClient EMS

FortiGate

FortiAnalyzer

Show Answer Comment (0)

Question 12

An administrator configures ZTNA configuration on the FortiGate for remote users. Which statement is true about the firewall policy?

It enforces access control

It redirects the client request to the access proxy

It defines the access proxy

It applies security profiles to protect traffic

Show Answer Comment (0)

Question 13

An administrator wants to simplify remote access without asking users to provide user credentials.

Which access control method provides this solution'?

SSL VPN

ZTNA full mode

L2TP

ZTNA IP/MAC filtering mode

Show Answer Comment (0)

Question 14

Why does FortiGate need the root CA certificate of FortiClient EMS?

To sign FortiClient CSR requests

To revoke FortiClient client certificates

To trust certificates issued by FortiClient EMS

To update FortiClient client certificates

Show Answer Comment (0)

Question 15

Which two statements are true about ZTNA? (Choose two.)

ZTNA provides role-based access

ZTNA manages access for remote users only

ZTNA manages access through the client only

ZTNA provides a security posture check

Show Answer Comment (0)

Question 16

What does FortiClient do as a fabric agent? (Choose two.)

Provides application inventory

Provides IOC verdicts

Automates Responses

Creates dynamic policies

Show Answer Comment (0)

Question 17

Which component or device shares ZTNA tag information through Security Fabric integration?

FortiClient EMS

FortiGate

FortiGate Access Proxy

FortiClient

Show Answer Comment (0)

Suggested answer: A

Explanation:

FortiClient EMS is the component that shares ZTNA tag information through Security Fabric integration. ZTNA tags are synchronized from FortiClient EMS as inputs for the FortiGate application gateway. They can be used in ZTNA policies as security posture checks to ensure certain security criteria are met. FortiClient EMS can share ZTNA tags across multiple devices in the Fabric, such as FortiGate, FortiManager, and FortiAnalyzer. FortiClient EMS can also share ZTNA tags across multiple VDOMs on the same FortiGate device.FortiClient EMS can be configured to control the ZTNA tag sharing behavior in the Fabric Devices settings1.

FortiGate is the device that enforces ZTNA policies using ZTNA tags. FortiGate can receive ZTNA tags from FortiClient EMS via Fabric Connector. FortiGate can also publish ZTNA services through the ZTNA portal, which allows users to access applications without installing FortiClient.FortiGate can also provide ZTNA inline CASB for SaaS application access control2.

FortiGate Access Proxy is a feature that enables FortiGate to act as a proxy for ZTNA traffic. FortiGate Access Proxy can be deployed in front of the application servers to provide ZTNA protection. FortiGate Access Proxy can also be deployed behind the application servers to provide ZTNA visibility.FortiGate Access Proxy can use ZTNA tags to identify and authenticate users and devices2.

FortiClient is the endpoint software that connects to ZTNA services. FortiClient can register ZTNA tags with FortiClient EMS based on the endpoint security posture. FortiClient can also use ZTNA tags to access ZTNA services published by FortiGate.FortiClient can also use ZTNA tags to access SaaS applications with ZTNA inline CASB2.

Technical Tip: Behavior of ZTNA Tags shared across multiple vdoms or multiple FortiGate firewalls in the Security Fabric connected to the same FortiClient EMS Server

Synchronizing FortiClient ZTNA tags

Zero Trust Network Access (ZTNA) to Control Application Access

Question 18

An administrator is required to maintain a software vulnerability on the endpoints, without showing the feature on the FortiClient dashboard. What must the administrator do to achieve this requirement?

Disable select the vulnerability scan feature in the deployment package

Use the default endpoint profile

Select the vulnerability scan feature in the deployment package, but disable the feature on the endpoint profile

Click the hide icon on the vulnerability scan tab

Show Answer Comment (0)

Question 19

Refer to the exhibit.

Which shows FortiClient EMS deployment profiles.

When an administrator creates a deployment profile on FortiClient EMS, which statement about the deployment profile is true?

Deployment-1 will install FortiClient on new AD group endpoints

Deployment-2 will install FortiClient on both the AD group and workgroup

Deployment-2 will upgrade FortiClient on both the AD group and workgroup

Deployment-1 will upgrade FortiClient only on the workgroup

Show Answer Comment (0)

Question 20

An administrator needs to connect FortiClient EMS as a fabric connector to FortiGate. What is the prerequisite to get FortiClient EMS to connect to FortiGate successfully?

Revoke and update the FortiClient EMS root CA.

Revoke and update the FortiClient client certificate on EMS.

Import and verify the FortiClient client certificate on FortiGate.

Import and verify the FortiClient EMS root CA certificate on FortiGate

Show Answer Comment (0)

Total 49 questions

1 2 3 4 5

Go to page: of 5

Fortinet NSE5_FCT-7.0 Practice Test - Questions Answers, Page 2

Question list

List of questions

Question 11

(0)

Question 12

(0)

Question 13

(0)

Question 14

(0)

Question 15

(0)

Question 16

(0)

Question 17

(0)

Question 18

(0)

Question 19

(0)

Question 20

(0)

Related questions

Question