VCEdump

NSE5_FCT-7.0 Fortinet NSE 5 - FortiClient EMS 7.0

PDF question preview Back to product

Free preview

8 sample questions

The complete product contains 49 questions.

Question formats

Single choice5

Multiple choice3

Compare study plans

Fortinet · NSE5_FCT-7.0

NSE5_FCT-7.0 questions and answers

Review the question wording, option layout, and available explanations before choosing a study plan.

Question 1

Single choice

Which component or device shares device status information through ZTNA telemetry?

A
FortiClient
B
FortiGate
C
FortiGate Access Proxy
D
FortiClient EMS

Question 2

Multiple choice

Refer to the exhibit, which shows the endpoint summary information on FortiClient EMS.

What two conclusions can you make based on the Remote-Client status shown above? (Choose two.)

A
The endpoint is classified as at risk.
B
The endpoint has been assigned the Default endpoint policy.
C
The endpoint is configured to support FortiSandbox.
D
The endpoint is currently off-net.

Question 3

Single choice

A FortiClient EMS administrator has enabled the compliance rule for the sales department.

Which Fortinet device will enforce compliance with dynamic access control?

A
FortiClient
B
FortiClient EMS
C
FortiGate
D
FortiAnalyzer

Question 4

Single choice

Which security fabric component sends a notification to quarantine an endpoint after IOC detection in the automation process?

A
FortiAnalyzer
B
FortiClient
C
ForbClient EMS
D
Forti Gate

Question 5

Single choice

What action does FortiClient anti-exploit detection take when it detects exploits?

A
Blocks memory allocation to the compromised application process
B
Patches the compromised application process
C
Deletes the compromised application process
D
Terminates the compromised application process

Question 6

Single choice

Refer to the exhibit.

Based on the FortiClient logs shown in the exhibit which endpoint profile policy is currently applied to the FortiClient endpoint from the EMS server?

A
Default
B
Compliance rules default
C
Fortinet-Training
D
Default configuration policy

Question 7

Multiple choice

Refer to the exhibit, which shows the Zero Trust Tagging Rule Set configuration.

Which two statements about the rule set are true? (Choose two.)

A
The endpoint must satisfy that only Windows 10 is running.
B
The endpoint must satisfy that only AV software is installed and running.
C
The endpoint must satisfy that antivirus is installed and running and Windows 10 is running.
D
The endpoint must satisfy that only Windows Server 2012 R2 is running.

Question 8

Multiple choice

Refer to the exhibit.

Based on the FortiClient log details shown in the exhibit, which two statements are true? (Choose two.)

A
The file status is Quarantined
B
The filename is sent to ForuSandbox for further inspection.
C
The file location IS \??\D:\Users\.
D
The filename is Unconfirmed 899290 .crdownload.