A Review Of Certified NSE5_FCT-7.0 Pdf

NEW QUESTION 1
Which two statements are true about the ZTNA rule? (Choose two. )

• A. It enforces access control
• B. It redirects the client request to the access proxy
• C. It defines the access proxy
• D. It applies security profiles to protect traffic

Answer: AD

Explanation:
"A ZTNA rule is a proxy policy used to enforce access control. ZTNA tags or tag groups can be defined to enforce zero trust role based access. Security profiles can be configured to protect this traffic."
"ZTNA rules help control access by defining users and ZTNA tags to perform user authentication and security posture checks. And just like firewall policies, you can control the source and destination addresses, and apply appropriate security profiles to scan the traffic."
https://docs.fortinet.com/document/fortigate/7.0.0/ztna-deployment/899992/configuring-ztna-rules-to-control-ac

NEW QUESTION 2
Refer to the exhibit, which shows the Zero Trust Tagging Rule Set configuration.

Which two statements about the rule set are true? (Choose two.)

• A. The endpoint must satisfy that only Windows 10 is running.
• B. The endpoint must satisfy that only AV software is installed and running.
• C. The endpoint must satisfy that antivirus is installed and running and Windows 10 is running.
• D. The endpoint must satisfy that only Windows Server 2012 R2 is running.

Answer: BC

NEW QUESTION 3
Which two benefits are benefits of using multi-tenancy mode on FortiClient EMS? (Choose two.)

• A. The fabric connector must use an IP address to connect to FortiClient EMS
• B. It provides granular access and segmentation.
• C. Licenses are shared among sites.
• D. Separate host servers manage each site.

Answer: BD

Explanation:
FCT-EMS 7,0 Page 101 : You would use multi-tenancy in an MSSP environment to conserve resources and use the same license (the total number of FortiClient licenses are shared between sites)

NEW QUESTION 4
Refer to the exhibit.

Based on the FortiClient logs shown in the exhibit which application is blocked by the application firewall?

• A. Twitter
• B. Facebook
• C. Internet Explorer
• D. Firefox

Answer: D

NEW QUESTION 5
What is the function of the quick scan option on FortiClient?

• A. It scans programs and drivers that are currently running, for threats.
• B. It allows users to select a specific file folder on their local hard disk drive (HDD), to scan for threats.
• C. It performs a full system scan including all files, executable files, DLLs, and drivers for threats.

Answer: A

NEW QUESTION 6
An administrator deploys a FortiClient installation through the Microsoft AD group policy After installation is complete all the custom configuration is missing.
What could have caused this problem?

• A. The FortiClient exe file is included in the distribution package
• B. The FortiClient MST file is missing from the distribution package
• C. FortiClient does not have permission to access the distribution package.
• D. The FortiClient package is not assigned to the group

Answer: D

NEW QUESTION 7
Refer to the exhibit.

Based on the CLI output from FortiGate. which statement is true?

• A. FortiGate is configured to pull user groups from FortiClient EMS
• B. FortiGate is configured with local user group
• C. FortiGate is configured to pull user groups from FortiAuthenticator
• D. FortiGate is configured to pull user groups from AD Server.

Answer: A

NEW QUESTION 8
Refer to the exhibits, which show a network topology diagram of ZTNA proxy access and the ZTNA rule configuration.


An administrator runs the diagnose endpoint record list CLI command on FortiGate to check Remote-Client endpoint information, however Remote-Client is not showing up in the endpoint record list.
What is the cause of this issue?

• A. Remote-Client failed the client certificate authentication.
• B. Remote-Client provided an empty client certificate to connect to the ZTNA access proxy.
• C. Remote-Client has not initiated a connection to the ZTNA access proxy.
• D. Remote-Client provided an invalid certificate to connect to the ZTNA access proxy.

Answer: C

NEW QUESTION 9
An administrator is required to maintain a software vulnerability on the endpoints, without showing the feature on the FortiClient dashboard. What must the administrator do to achieve this requirement?

• A. Disable select the vulnerability scan feature in the deployment package
• B. Use the default endpoint profile
• C. Select the vulnerability scan feature in the deployment package, but disable the feature on the endpoint profile
• D. Click the hide icon on the vulnerability scan tab

Answer: D

NEW QUESTION 10
When site categories are disabled in FortiClient webfilter and antivirus (malicious websites), which feature can be used to protect the endpoint from malicious web access?

• A. Real-time protection list
• B. Block malicious websites on antivirus
• C. FortiSandbox URL list

Answer: A

NEW QUESTION 11
Which component or device shares device status information through ZTNA telemetry?

• A. FortiClient
• B. FortiGate
• C. FortiGate Access Proxy
• D. FortiClient EMS

Answer: A

Explanation:
FortiClient communicates directly with FortiClient EMS to continuously share device status information through ZTNA telemetry.

NEW QUESTION 12
What action does FortiClient anti-exploit detection take when it detects exploits?

• A. Blocks memory allocation to the compromised application process
• B. Patches the compromised application process
• C. Deletes the compromised application process

Answer: A

NEW QUESTION 13
Refer to the exhibit.

An administrator has restored the modified XML configuration file to FortiClient and sees the error shown in the exhibit.
Based on the XML settings shown in the exhibit, what must the administrator do to resolve the issue with the XML configuration file?

• A. The administrator must resolve the XML syntax error.
• B. The administrator must use a password to decrypt the file
• C. The administrator must change the file size
• D. The administrator must save the file as FortiClient-config conf.

Answer: A

NEW QUESTION 14
Refer to the exhibit.

Which shows multiple endpoint policies on FortiClient EMS.
Which policy is applied to the endpoint in the AD group trainingAD?

• A. The Sales policy
• B. The Training policy
• C. Both the Sales and Training policies because their priority is higher than the Default policy
• D. The Default policy because it has the highest priority

Answer: B

NEW QUESTION 15
An administrator wants to simplify remote access without asking users to provide user credentials. Which access control method provides this solution"?

• A. SSL VPN
• B. ZTNA full mode
• C. L2TP
• D. ZTNA IP/MAC filtering mode

Answer: B

NEW QUESTION 16
......