Fortinet FCP_FCT_AD-7.2 Exam Questions Instant Access

Question 1

A new chrome book is connected in a school's network.

Which component can the EMS administrator use to manage the FortiClient web filter extension installed on the Google Chromebook endpoint?

AFortiClient EMS

BFortiClient site categories

CFortiClient customer URL list

DFortiClient web filter extension

Answer : D

For managing the FortiClient web filter extension installed on the Google Chromebook endpoint, the EMS administrator can use the following component:

FortiClient EMS (Enterprise Management Server) is designed to manage and control multiple FortiClient installations across various endpoints.

EMS provides centralized management for endpoint policies, including web filtering configurations.

The EMS administrator can configure and enforce web filter policies on Chromebooks through the EMS console.

Therefore, FortiClient EMS is the correct component for managing the web filter extension on Google Chromebook endpoints.

Reference

FortiClient EMS 7.2 Study Guide, Chromebook Management Section

Fortinet Documentation on FortiClient EMS and Web Filtering for Chromebooks

Question 2

Which two are benefits of using multi-tenancy mode on FortiClient EMS? (Choose two.)

ASeparate host servers manage each site.

BLicenses are shared among sites

CThe fabric connector must use an IP address to connect to FortiClient EMS.

DIt provides granular access and segmentation.

Answer : C, D

Understanding Multi-Tenancy Mode:

Multi-tenancy mode allows multiple independent sites or tenants to be managed from a single FortiClient EMS instance.

Evaluating Benefits:

Licenses can be shared among sites, making it cost-effective (B).

It provides granular access and segmentation, allowing for detailed control and separation between tenants (D).

Eliminating Incorrect Options:

Separate host servers managing each site (A) is not a feature of multi-tenancy mode.

The fabric connector's use of an IP address (C) is unrelated to multi-tenancy benefits.

FortiClient EMS multi-tenancy configuration and benefits documentation from the study guides.

Question 3

Refer to the exhibits.

Which shows the configuration of endpoint policies.

Based on the configuration, what will happen when someone logs in with the user account student on an endpoint in the trainingAD domain?

AFortiClient EMS will assign the Sales policy

BFortiClient EMS will assign the Training policy

CFortiClient EMS will assign the Default policy

DFortiClient EMS will assign the Training policy for on-fabric endpoints and the Sales policy for the off-fabric endpoint

Answer : B

Based on the configuration shown in the exhibits:

There are three endpoint policies configured: Training, Sales, and Default.

The 'Training' policy is assigned to the 'trainingAD.training.lab' group.

The 'Sales' policy is assigned to 'All Groups' and 'trainingAD.training.lab/student.'

The 'Default' policy has no specific groups assigned.

When someone logs in with the user account 'student' on an endpoint in the 'trainingAD' domain:

The 'Training' policy is specifically assigned to the 'trainingAD.training.lab' group.

The 'Sales' policy includes 'trainingAD.training.lab/student' but not the general 'trainingAD.training.lab' group.

The system will prioritize the most specific match for the group.

Therefore, FortiClient EMS will assign the 'Training' policy to the 'student' account logging into the 'trainingAD' domain as it matches the group 'trainingAD.training.lab' directly.

Reference

FortiClient EMS 7.2 Study Guide, Endpoint Policy Configuration Section

FortiClient EMS Documentation on Group Policy Assignment and Matching

Question 4

An administrator configures ZTNA configuration on the FortiGate. Which statement is true about the firewall policy?

AIt redirects the client request to the access proxy.

BIt uses the access proxy.

CIt defines ZTNA server.

DIt only uses ZTNA tags to control access for endpoints.

Answer : A

'The firewall policy matches and redirects client requests to the access proxy VIP' https://docs.fortinet.com/document/fortigate/7.0.0/new-features/194961/basic-ztna-configuration

Question 5

A FortiClient EMS administrator has enabled the compliance rule for the sales department Which Fortinet device will enforce compliance with dynamic access control?

AFortiClient

BFortiClient EMS

CFortiGate

DFortiAnalyzer

Answer : C

Understanding Compliance Rules:

The compliance rule for the sales department needs to be enforced dynamically.

Enforcing Compliance:

FortiGate is responsible for enforcing compliance by integrating with FortiClient EMS to apply dynamic access control based on compliance status.

Conclusion:

The Fortinet device that will enforce compliance with dynamic access control is the FortiGate.

Compliance and enforcement documentation from FortiGate and FortiClient EMS study guides.

Question 6

Refer to the exhibits.

Based on the FortiGate Security Fabric settings shown in the exhibits, what must an administrator do on the EMS server to successfully quarantine an endpoint. when it is detected as a compromised host (loC)?

AThe administrator must enable remote HTTPS access to EMS.

BThe administrator must enable FQDN on EMS.

CThe administrator must authorize FortiGate on FortiAnalyzer.

DThe administrator must enable SSH access to EMS.

Answer : A

Based on the FortiGate Security Fabric settings shown in the exhibits, to successfully quarantine an endpoint when it is detected as a compromised host (IOC), the following step is required:

Enable Remote HTTPS Access to EMS: This setting allows FortiGate to communicate securely with FortiClient EMS over HTTPS. Remote HTTPS access is essential for the quarantine functionality to operate correctly, enabling the EMS server to receive and act upon the quarantine commands from FortiGate.

Therefore, the administrator must enable remote HTTPS access to EMS to allow the quarantine process to function properly.

Reference

FortiGate Infrastructure 7.2 Study Guide, Security Fabric and Integration with EMS Sections

Fortinet Documentation on Enabling Remote HTTPS Access to FortiClient EMS

Question 7

ZTNA Network Topology

Refer to the exhibits, which show a network topology diagram of ZTNA proxy access and the ZTNA rule configuration.

An administrator runs the diagnose endpoint record list CLI command on FortiGate to check Remote-Client endpoint information, however Remote-Client is not showing up in the endpoint record list.

What is the cause of this issue?

ARemote-Client has not initiated a connection to the ZTNA access proxy.

BRemote-Client provided an empty client certificate to connect to the ZTNA access proxy.

CRemote-Client provided an invalid certificate to connect to the ZTNA access proxy.

DRemote-Client failed the client certificate authentication.

Answer : D

Fortinet FCP - FortiClient EMS 7.2 Administrator FCP_FCT_AD-7.2 Exam Questions