Fortinet Network Security Analyst NSE5_FCT-7.0 Questions & Answers

• Question 31:

  Refer to the exhibit.

  

  Which shows the output of the ZTNA traffic log on FortiGate. What can you conclude from the log message?

  A. The remote user connection does not match the explicit proxy policy.

  B. The remote user connection does not match the ZTNA server configuration.

  C. The remote user connection does not match the ZTNA rule configuration.

  D. The remote user connection does not match the ZTNA firewall policy

  Correct Answer: B

  API gateway cannot be matched or real servers cannot be reached

• Question 32:

  An administrator is required to maintain a software vulnerability on the endpoints, without showing the feature on the FortiClient dashboard. What must the administrator do to achieve this requirement?

  A. Disable select the vulnerability scan feature in the deployment package

  B. Use the default endpoint profile

  C. Select the vulnerability scan feature in the deployment package, but disable the feature on the endpoint profile

  D. Click the hide icon on the vulnerability scan tab

  Correct Answer: D

• Question 33:

  Refer to the exhibit.

  

  Based on the FortiClient logs shown in the exhibit, which software application is blocked by the application firewall?

  A. Twitter

  B. Facebook

  C. Internet Explorer

  D. Firefox

  Correct Answer: D

• Question 34:

  Which security fabric component sends a notification to quarantine an endpoint after IOC detection in the automation process?

  A. FortiAnalyzer

  B. FortiClient

  C. ForbClient EMS

  D. Forti Gate

  Correct Answer: D

• Question 35:

  Refer to the exhibit.

  

  Based on the settings shown in the exhibit, which action will FortiClient take when users try to access www.facebook.com?

  A. FortiClient will monitor only the user's web access to the Facebook website

  B. FortiClient will block access to Facebook and its subdomains.

  C. FortiClient will prompt a warning message to warn the user before they can access the Facebook website

  D. FortiClient will allow access to Facebook.

  Correct Answer: D

• Question 36:

  An administrator wants to simplify remote access without asking users to provide user credentials. Which access control method provides this solution"?

  A. SSL VPN

  B. ZTNA full mode

  C. L2TP

  D. ZTNA IP/MAC filtering mode

  Correct Answer: B

• Question 37:

  Refer to the exhibits.

  

  Based on the FortiGate Security Fabric settings shown in the exhibits, what must an administrator do on the EMS server to successfully quarantine an endpoint. when it is detected as a compromised host (loC)?

  A. The administrator must enable remote HTTPS access to EMS.

  B. The administrator must enable FQDN on EMS.

  C. The administrator must authorize FortiGate on FortiAnalyzer.

  D. The administrator must enable SSH access to EMS.

  Correct Answer: A

• Question 38:

  An administrator installs FortiClient on Windows Server. What is the default behavior of real-time protection control?

  A. Real-time protection must update AV signature database

  B. Real-time protection sends malicious files to FortiSandbox when the file is not detected locally

  C. Real-time protection is disabled

  D. Real-time protection must update the signature database from FortiSandbox

  Correct Answer: C

• Question 39:

  What is the function of the quick scan option on FortiClient?

  A. It scans programs and drivers that are currently running, for threats.

  B. It allows users to select a specific file folder on their local hard disk drive (HDD), to scan for threats.

  C. It performs a full system scan including all files, executable files, DLLs, and drivers for threats.

  D. It scans executable files, DLLs, and drivers that are currently running, for threats.

  Correct Answer: D

  Quick Scan scans only executable files, DLLs, and drivers that are currently running for threats.

• Question 40:

  A new chrome book is connected in a school's network.

  Which component can the EMS administrator use to manage the FortiClient web filter extension installed on the Google Chromebook endpoint?

  A. FortiClient site categories

  B. FortiClient customer URL list

  C. FortiClient web filter extension

  D. FortiClient EMS

  Correct Answer: C