Fortinet Fortinet Certifications NSE5_FCT-7.0 Questions & Answers

• Question 41:

  Refer to the exhibit.

  

  Based on the CLI output from FortiGate. which statement is true?

  A. FortiGate is configured to pull user groups from FortiClient EMS

  B. FortiGate is configured with local user group

  C. FortiGate is configured to pull user groups from FortiAuthenticator

  D. FortiGate is configured to pull user groups from AD Server.

  Correct Answer: A

• Question 42:

  An administrator deploys a FortiClient installation through the Microsoft AD group policy After installation is complete all the custom configuration is missing. What could have caused this problem?

  A. The FortiClient exe file is included in the distribution package

  B. The FortiClient MST file is missing from the distribution package

  C. FortiClient does not have permission to access the distribution package.

  D. The FortiClient package is not assigned to the group

  Correct Answer: B

• Question 43:

  Refer to the exhibits, which show a network topology diagram of ZTNA proxy access and the ZTNA rule configuration.

  An administrator runs the diagnose endpoint record list CLI command on FortiGate to check Remote-Client endpoint information, however Remote-Client is not showing up in the endpoint record list.

  What is the cause of this issue?

  

  A. Remote-Client failed the client certificate authentication.

  B. Remote-Client provided an empty client certificate to connect to the ZTNA access proxy.

  C. Remote-Client has not initiated a connection to the ZTNA access proxy.

  D. Remote-Client provided an invalid certificate to connect to the ZTNA access proxy.

  Correct Answer: C

• Question 44:

  Refer to the exhibit.

  

  Which shows FortiClient EMS deployment profiles.

  When an administrator creates a deployment profile on FortiClient EMS, which statement about the deployment profile is true?

  A. Deployment-1 will install FortiClient on new AD group endpoints

  B. Deployment-2 will install FortiClient on both the AD group and workgroup

  C. Deployment-2 will upgrade FortiClient on both the AD group and workgroup

  D. Deployment-1 will upgrade FortiClient only on the workgroup

  Correct Answer: B

• Question 45:

  What does FortiClient do as a fabric agent? (Choose two.)

  A. Provides IOC verdicts

  B. Automates Responses

  C. Creates dynamic policies

  D. Provides application inventory

  Correct Answer: CD

  FortiClient, as a fabric agent, does not provide IOC verdicts. The role of providing IOC (Indicators of Compromise) verdicts is typically performed by other security solutions or systems that specialize in threat detection and analysis.

  Similarly, FortiClient, as a fabric agent, does not have the capability to automate responses. While FortiClient can trigger alerts or notifications based on security events, the automation of responses typically requires integration with a Security Orchestration, Automation, and Response (SOAR) platform or similar systems.

• Question 46:

  Which component or device shares device status information through ZTNA telemetry?

  A. FortiClient

  B. FortiGate

  C. FortiGate Access Proxy

  D. FortiClient EMS

  Correct Answer: A

  FortiClient communicates directly with FortiClient EMS to continuously share device status information through ZTNA telemetry.

• Question 47:

  Which two statements are true about the ZTNA rule? (Choose two. )

  A. It enforces access control

  B. It redirects the client request to the access proxy

  C. It defines the access proxy

  D. It applies security profiles to protect traffic

  Correct Answer: AD

  "A ZTNA rule is a proxy policy used to enforce access control. ZTNA tags or tag groups can be defined to enforce zero trust role based access. Security profiles can be configured to protect this traffic."

  "ZTNA rules help control access by defining users and ZTNA tags to perform user authentication and security posture checks. And just like firewall policies, you can control the source and destination addresses, and apply appropriate security

  profiles to scan the traffic."

  https://docs.fortinet.com/document/fortigate/7.0.0/ztna-deployment/899992/configuring-ztna-rules-to-control-access

• Question 48:

  Refer to the exhibit.

  

  Based on the Security Fabric automation settings, what action will be taken on compromised endpoints?

  A. Endpoints will be quarantined through EMS

  B. Endpoints will be banned on FortiGate

  C. An email notification will be sent for compromised endpoints

  D. Endpoints will be quarantined through FortiSwitch

  Correct Answer: A

• Question 49:

  A FortiClient EMS administrator has enabled the compliance rule for the sales department. Which Fortinet device will enforce compliance with dynamic access control?

  A. FortiClient

  B. FortiClient EMS

  C. FortiGate

  D. FortiAnalyzer

  Correct Answer: C