Fortinet NSE5_FCT-7.0 Exam Practice Test Instant Access

Question 1

Which component or device shares device status information through ZTNA telemetry?

AFortiClient

BFortiGate

CFortiGate Access Proxy

DFortiClient EMS

Answer : A

FortiClient communicates directly with FortiClient EMS to continuously share device status information through ZTNA telemetry.

Question 2

Which three types of antivirus scans are available on FortiClient? (Choose three )

AProxy scan

BFull scan

CCustom scan

DFlow scan

EQuick scan

Answer : B, C, E

Question 3

An administrator is required to maintain a software inventory on the endpoints. without showing the feature on the FortiClient dashboard What must the administrator do to achieve this requirement?

AThe administrator must use default endpoint profile

BThe administrator must not select the vulnerability scan feature in the deployment package.

CThe administrator must select the vulnerability scan feature in the deployment package, but disable the feature on the endpoint profile

DThe administrator must click the hide icon on the vulnerability scan tab

Answer : D

Question 4

Refer to the exhibit.

An administrator has restored the modified XML configuration file to FortiClient and sees the error shown in the exhibit.

Based on the XML settings shown in the exhibit, what must the administrator do to resolve the issue with the XML configuration file?

AThe administrator must resolve the XML syntax error.

BThe administrator must use a password to decrypt the file

CThe administrator must change the file size

DThe administrator must save the file as FortiClient-config conf.

Answer : A

missing </connections> at the bottom

Question 5

When site categories are disabled in FortiClient webfilter and antivirus (malicious websites), which feature can be used to protect the endpoint from malicious web access?

AWeb exclusion list

BReal-time protection list

CBlock malicious websites on antivirus

DFortiSandbox URL list

Answer : A

Site Categories enables site categories from FortiGuard. When site categories are disabled, FortiClient is protected by the exclusion list. For all categories below, you can configure an action for the entire site category by selecting either Block, Warn, Allow, or Monitor. Each site category is shown on this slide.

Question 6

Which component or device shares ZTNA tag information through Security Fabric integration?

AFortiClient EMS

BFortiGate

CFortiGate Access Proxy

DFortiClient

Answer : A

FortiClient EMS is the component that shares ZTNA tag information through Security Fabric integration. ZTNA tags are synchronized from FortiClient EMS as inputs for the FortiGate application gateway. They can be used in ZTNA policies as security posture checks to ensure certain security criteria are met. FortiClient EMS can share ZTNA tags across multiple devices in the Fabric, such as FortiGate, FortiManager, and FortiAnalyzer. FortiClient EMS can also share ZTNA tags across multiple VDOMs on the same FortiGate device.FortiClient EMS can be configured to control the ZTNA tag sharing behavior in the Fabric Devices settings1.

FortiGate is the device that enforces ZTNA policies using ZTNA tags. FortiGate can receive ZTNA tags from FortiClient EMS via Fabric Connector. FortiGate can also publish ZTNA services through the ZTNA portal, which allows users to access applications without installing FortiClient.FortiGate can also provide ZTNA inline CASB for SaaS application access control2.

FortiGate Access Proxy is a feature that enables FortiGate to act as a proxy for ZTNA traffic. FortiGate Access Proxy can be deployed in front of the application servers to provide ZTNA protection. FortiGate Access Proxy can also be deployed behind the application servers to provide ZTNA visibility.FortiGate Access Proxy can use ZTNA tags to identify and authenticate users and devices2.

FortiClient is the endpoint software that connects to ZTNA services. FortiClient can register ZTNA tags with FortiClient EMS based on the endpoint security posture. FortiClient can also use ZTNA tags to access ZTNA services published by FortiGate.FortiClient can also use ZTNA tags to access SaaS applications with ZTNA inline CASB2.

Technical Tip: Behavior of ZTNA Tags shared across multiple vdoms or multiple FortiGate firewalls in the Security Fabric connected to the same FortiClient EMS Server