Fortinet NSE5_FCT-7.0 Online Practice Questions and Exam Preparation

Fortinet NSE5_FCT-7.0 Online Questions & Answers

• Question 31:

  Refer to the exhibits.

  

  Which show the Zero Trust Tag Monitor and the FortiClient GUI status.

  Remote-Client is tagged as Remote-Users on the FortiClient EMS Zero Trust Tag Monitor.

  What must an administrator do to show the tag on the FortiClient GUI?

  A. Update tagging rule logic to enable tag visibility
  B. Change the FortiClient system settings to enable tag visibility
  C. Change the endpoint control setting to enable tag visibility
  D. Change the user identity settings to enable tag visibility
  B. Change the FortiClient system settings to enable tag visibility

  ---

  Explanation/Reference:

• Question 32:

  In a FortiSandbox integration, what does the remediation option do?

  A. Wait for FortiSandbox results before allowing files
  B. Exclude specified files
  C. Alert and notify only
  D. Deny access to a file when it sees no results
  C. Alert and notify only

• Question 33:

  Refer to the exhibit.

  

  Which shows multiple endpoint policies on FortiClient EMS.

  Which policy is applied to the endpoint in the AD group trainingAD?

  A. The Sales policy
  B. The Training policy
  C. Both the Sales and Training policies because their priority is higher than the Default policy
  D. The Default policy because it has the highest priority
  B. The Training policy

  ---

  Explanation/Reference:

• Question 34:

  An administrator is required to maintain a software inventory on the endpoints. without showing the feature on the FortiClient dashboard What must the administrator do to achieve this requirement?

  A. The administrator must use default endpoint profile
  B. The administrator must not select the vulnerability scan feature in the deployment package.
  C. The administrator must select the vulnerability scan feature in the deployment package, but disable the feature on the endpoint profile
  D. The administrator must click the hide icon on the vulnerability scan tab
  D. The administrator must click the hide icon on the vulnerability scan tab

• Question 35:

  What does FortiClient do as a fabric agent? (Choose two.)

  A. Provides IOC verdicts
  B. Automates Responses
  C. Creates dynamic policies
  D. Provides application inventory
  C. Creates dynamic policies
  D. Provides application inventory

  ---

  Explanation/Reference:

  FortiClient, as a fabric agent, does not provide IOC verdicts. The role of providing IOC (Indicators of Compromise) verdicts is typically performed by other security solutions or systems that specialize in threat detection and analysis.

  Similarly, FortiClient, as a fabric agent, does not have the capability to automate responses. While FortiClient can trigger alerts or notifications based on security events, the automation of responses typically requires integration with a Security Orchestration, Automation, and Response (SOAR) platform or similar systems.

• Question 36:

  What is the function of the quick scan option on FortiClient?

  A. It scans programs and drivers that are currently running, for threats.
  B. It allows users to select a specific file folder on their local hard disk drive (HDD), to scan for threats.
  C. It performs a full system scan including all files, executable files, DLLs, and drivers for threats.
  D. It scans executable files, DLLs, and drivers that are currently running, for threats.
  D. It scans executable files, DLLs, and drivers that are currently running, for threats.

  ---

  Explanation/Reference:

  Quick Scan scans only executable files, DLLs, and drivers that are currently running for threats.

• Question 37:

  Which two VPN types can a FortiClient endpoint user inmate from the Windows command prompt? (Choose two)

  A. L2TP
  B. PPTP
  C. IPSec
  D. SSL VPN
  C. IPSec
  D. SSL VPN

• Question 38:

  Which component or device shares device status information through ZTNA telemetry?

  A. FortiClient
  B. FortiGate
  C. FortiGate Access Proxy
  D. FortiClient EMS
  A. FortiClient

  ---

  Explanation/Reference:

  FortiClient communicates directly with FortiClient EMS to continuously share device status information through ZTNA telemetry.

• Question 39:

  Refer to the exhibit, which shows the endpoint summary information on FortiClient EMS.

  

  What two conclusions can you make based on the Remote-Client status shown above? (Choose two.)

  A. The endpoint is classified as at risk.
  B. The endpoint has been assigned the Default endpoint policy.
  C. The endpoint is configured to support FortiSandbox.
  D. The endpoint is currently off-net.
  B. The endpoint has been assigned the Default endpoint policy.
  D. The endpoint is currently off-net.

• Question 40:

  Refer to the exhibit.

  

  Based on the FortiClient logs shown in the exhibit which endpoint profile policy is currently applied to the FortiClient endpoint from the EMS server?

  A. Default
  B. Compliance rules default
  C. Fortinet- Training
  D. Default configuration policy
  C. Fortinet- Training

  ---

  Explanation/Reference: