Fortinet NSE5_FCT-7.0 Online Practice Questions and Exam Preparation

Fortinet NSE5_FCT-7.0 Online Questions & Answers

• Question 21:

  Refer to the exhibit.

  

  Which shows the output of the ZTNA traffic log on FortiGate. What can you conclude from the log message?

  A. The remote user connection does not match the explicit proxy policy.
  B. The remote user connection does not match the ZTNA server configuration.
  C. The remote user connection does not match the ZTNA rule configuration.
  D. The remote user connection does not match the ZTNA firewall policy
  B. The remote user connection does not match the ZTNA server configuration.

  ---

  Explanation/Reference:

  API gateway cannot be matched or real servers cannot be reached

• Question 22:

  Which three features does FortiClient endpoint security include? (Choose three.)

  A. L2TP
  B. IPsec
  C. DLP
  D. Vulnerability management
  E. Real-time protection
  B. IPsec
  D. Vulnerability management
  E. Real-time protection

  ---

  Explanation/Reference:

• Question 23:

  Refer to the exhibit.

  

  Based on the FortiClient log details shown in the exhibit, which two statements are true? (Choose two.)

  A. The file status is Quarantined
  B. The filename is sent to ForuSandbox for further inspection.
  C. The file location IS \??\D:\Users\.
  D. The filename is Unconfirmed 899290 .crdownload.
  A. The file status is Quarantined
  D. The filename is Unconfirmed 899290 .crdownload.

  ---

  Explanation/Reference:

• Question 24:

  When site categories are disabled in FortiClient webfilter and antivirus (malicious websites), which feature can be used to protect the endpoint from malicious web access?

  A. Real-time protection list
  B. Block malicious websites on antivirus
  C. FortiSandbox URL list
  D. Web exclusion list
  D. Web exclusion list

  ---

  Explanation/Reference:

• Question 25:

  Refer to the exhibit.

  

  Based on the CLI output from FortiGate. which statement is true?

  A. FortiGate is configured to pull user groups from FortiClient EMS
  B. FortiGate is configured with local user group
  C. FortiGate is configured to pull user groups from FortiAuthenticator
  D. FortiGate is configured to pull user groups from AD Server.
  A. FortiGate is configured to pull user groups from FortiClient EMS

• Question 26:

  What action does FortiClient anti-exploit detection take when it detects exploits?

  A. Blocks memory allocation to the compromised application process
  B. Patches the compromised application process
  C. Deletes the compromised application process
  D. Terminates the compromised application process
  D. Terminates the compromised application process

  ---

  Explanation/Reference:

  The anti-exploit detection protects vulnerable endpoints from unknown exploit attacks. FortiClient monitors the behavior of popular applications, such as web browsers (Internet Explorer, Chrome, Firefox, Opera), Java/Flash plug-ins, Microsoft Office applications, and PDF readers, to detect exploits that use zero-day or unpatched vulnerabilities to infect the endpoint. Once detected, FortiClient terminates the compromised application process.

• Question 27:

  Which statement about FortiClient enterprise management server is true?

  A. It provides centralized management of FortiGate devices.
  B. lt provides centralized management of multiple endpoints running FortiClient software.
  C. It provides centralized management of FortiClient Android endpoints only.
  D. It provides centralized management of Chromebooks running real-time protection
  B. lt provides centralized management of multiple endpoints running FortiClient software.

• Question 28:

  An administrator configures ZTNA configuration on the FortiGate for remote users. Which statement is true about the firewall policy?

  A. It enforces access control
  B. It redirects the client request to the access proxy
  C. It defines the access proxy
  D. It applies security profiles to protect traffic
  B. It redirects the client request to the access proxy

  ---

  Explanation/Reference:

  "The firewall policy matches and redirects client requests to the access proxy VIP" https://docs.fortinet.com/document/fortigate/7.0.0/new-features/194961/basic-ztna- configuration

• Question 29:

  Refer to the exhibit.

  

  Based on the settings shown in the exhibit what action will FortiClient take when it detects that a user is trying to download an infected file?

  A. Blocks the infected files as it is downloading
  B. Quarantines the infected files and logs all access attempts
  C. Sends the infected file to FortiGuard for analysis
  D. Allows the infected file to download without scan
  D. Allows the infected file to download without scan

• Question 30:

  Which two benefits are benefits of using multi-tenancy mode on FortiClient EMS? (Choose two.)

  A. The fabric connector must use an IP address to connect to FortiClient EMS
  B. It provides granular access and segmentation.
  C. Licenses are shared among sites.
  D. Separate host servers manage each site.
  B. It provides granular access and segmentation.
  D. Separate host servers manage each site.

  ---

  Explanation/Reference:

  FCT-EMS 7,0 Page 101 : You would use multi-tenancy in an MSSP environment to conserve resources and use the same license (the total number of FortiClient licenses are shared between sites)