The Secret Of Fortinet NSE5_FCT-7.0 Test

NEW QUESTION 1
Refer to the exhibits.


Which shows the configuration of endpoint policies.
Based on the configuration, what will happen when someone logs in with the user account student on an endpoint in the trainingAD domain?

• A. FortiClient EMS will assign the Sales policy
• B. FortiClient EMS will assign the Training policy
• C. FortiClient EMS will assign the Default policy
• D. FortiClient EMS will assign the Training policy for on-fabric endpoints and the Sales policy for the off-fabric endpoint

Answer: B

NEW QUESTION 2
When site categories are disabled in FortiClient webfilter and antivirus (malicious websites), which feature can be used to protect the endpoint from malicious web access?

• A. Real-time protection list
• B. Block malicious websites on antivirus
• C. FortiSandbox URL list

Answer: A

NEW QUESTION 3
Which two benefits are benefits of using multi-tenancy mode on FortiClient EMS? (Choose two.)

• A. The fabric connector must use an IP address to connect to FortiClient EMS
• B. It provides granular access and segmentation.
• C. Licenses are shared among sites.
• D. Separate host servers manage each site.

Answer: BD

Explanation:
FCT-EMS 7,0 Page 101 : You would use multi-tenancy in an MSSP environment to conserve resources and use the same license (the total number of FortiClient licenses are shared between sites)

NEW QUESTION 4
Refer to the exhibit.


Which shows the output of the ZTNA traffic log on FortiGate. What can you conclude from the log message?

• A. The remote user connection does not match the explicit proxy policy.
• B. The remote user connection does not match the ZTNA server configuration.
• C. The remote user connection does not match the ZTNA rule configuration.
• D. The remote user connection does not match the ZTNA firewall policy

Answer: D

NEW QUESTION 5
Refer to the exhibit, which shows the Zero Trust Tagging Rule Set configuration.

Which two statements about the rule set are true? (Choose two.)

• A. The endpoint must satisfy that only Windows 10 is running.
• B. The endpoint must satisfy that only AV software is installed and running.
• C. The endpoint must satisfy that antivirus is installed and running and Windows 10 is running.
• D. The endpoint must satisfy that only Windows Server 2012 R2 is running.

Answer: BC

NEW QUESTION 6
Which statement about FortiClient enterprise management server is true?

• A. It provides centralized management of FortiGate devices.
• B. lt provides centralized management of multiple endpoints running FortiClient software.
• C. It provides centralized management of FortiClient Android endpoints only.
• D. It provides centralized management of Chromebooks running real-time protection

Answer: B

NEW QUESTION 7
An administrator needs to connect FortiClient EMS as a fabric connector to FortiGate. What is the prerequisite to get FortiClient EMS to connect to FortiGate successfully?

• A. Revoke and update the FortiClient EMS root CA.
• B. Revoke and update the FortiClient client certificate on EMS.
• C. Import and verify the FortiClient client certificate on FortiGate.
• D. Import and verify the FortiClient EMS root CA certificate on FortiGate

Answer: D

NEW QUESTION 8
An administrator installs FortiClient on Windows Server. What is the default behavior of real-time protection control?

• A. Real-time protection must update AV signature database
• B. Real-time protection sends malicious files to FortiSandbox when the file is not detected locally
• C. Real-time protection is disabled
• D. Real-time protection must update the signature database from FortiSandbox

Answer: C

NEW QUESTION 9
What is the function of the quick scan option on FortiClient?

• A. It scans programs and drivers that are currently running, for threats.
• B. It allows users to select a specific file folder on their local hard disk drive (HDD), to scan for threats.
• C. It performs a full system scan including all files, executable files, DLLs, and drivers for threats.

Answer: A

NEW QUESTION 10
An administrator configures ZTNA configuration on the FortiGate for remote users. Which statement is true about the firewall policy?

• A. It enforces access control
• B. It redirects the client request to the access proxy
• C. It defines the access proxy
• D. It applies security profiles to protect traffic

Answer: B

Explanation:
"The firewall policy matches and redirects client requests to the access proxy VIP" https://docs.fortinet.com/document/fortigate/7.0.0/new-features/194961/basic-ztna-configuration

NEW QUESTION 11
Refer to the exhibit, which shows the endpoint summary information on FortiClient EMS.

What two conclusions can you make based on the Remote-Client status shown above? (Choose two.)

• A. The endpoint is classified as at risk.
• B. The endpoint has been assigned the Default endpoint policy.
• C. The endpoint is configured to support FortiSandbox.
• D. The endpoint is currently off-net.

Answer: BD

NEW QUESTION 12
Refer to the exhibit.

Based on the settings shown in the exhibit, which action will FortiClient take when users try to access www.facebook.com?

• A. FortiClient will monitor only the user's web access to the Facebook website
• B. FortiClient will block access to Facebook and its subdomains.
• C. FortiClient will prompt a warning message to warn the user before they can access the Facebook website

Answer: A

NEW QUESTION 13
Which security fabric component sends a notification to quarantine an endpoint after IOC detection in the automation process?

• A. FortiAnalyzer
• B. FortiClient
• C. ForbClient EMS
• D. Forti Gate

Answer: D

NEW QUESTION 14
Refer to the exhibit.

Based on the FortiClient logs shown in the exhibit which endpoint profile policy is currently applied to the FortiClient endpoint from the EMS server?

• A. Default
• B. Compliance rules default
• C. Fortinet- Training
• D. Default configuration policy

Answer: C

NEW QUESTION 15
Refer to the exhibit.

Based on the settings shown in the exhibit, which two actions must the administrator take to make the endpoint compliant? (Choose two.)

• A. Enable the webfilter profile
• B. Integrate FortiSandbox for infected file analysis
• C. Patch applications that have vulnerability rated as high or above
• D. Run Calculator application on the endpoint

Answer: CD

NEW QUESTION 16
......