Fortinet nse5-fct-7-0 practice test

Which component or device shares device status information through ZTNA telemetry?

• A. FortiClient
• B. FortiGate
• C. FortiGate Access Proxy
• D. FortiClient EMS

An administrator deploys a FortiClient installation through the Microsoft AD group policy. After the installation is complete, all the custom configuration is missing.
What could have caused this problem?

• A. The FortiClient MST file is missing from the distribution package.
• B. The FortiClient package is not assigned to the group.
• C. The FortiClient .exe file is included in the distribution package.
• D. FortiClient does not have permission to access the distribution package.

Which statement about FortiClient comprehensive endpoint protection is true?

• A. It helps to safeguard systems from email spam.
• B. It helps to safeguard systems from advanced security threats, such as malware.
• C. It helps to safeguard systems from data loss.
• D. It helps to safeguard systems from DDoS.

Which two VPN types can a FortiClient endpoint user initiate from the Windows command prompt? (Choose two.)

• A. PPTP
• B. L2TP
• C. SSL VPN
• D. IPSec

Refer to the exhibit.



Based on the settings shown in the exhibit, which two actions must the administrator take to make the endpoint compliant? (Choose two.)

• A. Enable the webfilter profile.
• B. Integrate FortiSandbox for infected file analysis.
• C. Patch applications that have vulnerability rated as high or above.
• D. Run Calculator application on the endpoint.

An administrator has a requirement to add user authentication to the ZTNA access for remote or off-fabric users.

Which FortiGate feature is required in addition to ZTNA?

• A. FortiGate endpoint control
• B. FortiGate certificates
• C. FortiGate FSSO
• D. FortiGate explicit proxy

Refer to the exhibit.

Based on the settings shown in the exhibit, which action will FortiClient take when users try to access www facebook.com?

• A. FortiClient will prompt a warning message to warn the user before they can access the Facebook website.
• B. FortiClient will block access to Facebook and its subdomains.
• C. FortiClient will monitor only the users web access to the Facebook website.
• D. FortiClient will allow access to Facebook.

Which security fabric component sends a notification to quarantine an endpoint after IOC detection in the automation process?

• A. FortiClient EMS
• B. FortiAnalyzer
• C. FortiClient
• D. FortiGate

Refer to the exhibit, which shows the output of the ZTNA traffic log on FortiGate.



What can you conclude from the log message?

• A. The remote user connection does not match the explicit proxy policy.
• B. The remote user connection does not match the ZTNA server configuration.
• C. The remote user connection does not match the ZTNA firewall policy.
• D. The remote user connection does not match the ZTNA rule configuration.

Why does FortiGate need the root CA certificate of FortiClient EMS?

• A. To update FortiClient client certificates
• B. To trust certificates issued by FortiClient EMS
• C. To revoke FortiClient client certificates
• D. To sign FortiClient CSR requests