Question 11
Which component or device shares ZTNA tag information through Security Fabric integration?
A. FortiClient
B. FortiClient EMS
C. FortiGate
D. FortiGate Access Proxy
Question 12
Which two VPN types can a FortiClient endpoint user initiate from the Windows command prompt? (Choose two.)
A. PPTP
B. L2TP
C. SSL VPN
D. IPSec
Question 13
Refer to the exhibit.
An administrator has restored the modified XML configuration file to FortiClient and sees the error shown in the exhibit.
Based on the XML settings, what must the administrator do to resolve the issue with the XML configuration file?
A. The administrator must use a password to decrypt the file.
B. The administrator must resolve the XML syntax error.
C. The administrator must save the file as FortiClient-config.conf.
D. The administrator must change the file format.
Question 14
Refer to the exhibit.
Based on the settings shown in the exhibit, which statement about FortiClient behaviour is true?
A. FortiClient blocks and deletes infected files after scanning them.
B. FortiClient copies infected files to the Resources folder without scanning them.
C. FortiClient quarantines infected files and reviews later, after scanning them.
D. FortiClient scans infected files when the user copies files to the Resources folder.
Question 15
Refer to the exhibit.
Based on the logs shown in the exhibit, why did FortiClient EMS fail to install FortiClient on the endpoint?
A. The FortiClient antivirus service is not running.
B. The Windows installer service is not running.
C. The task scheduler service is not running.
D. The remote registry service is not running.
Question 16
Refer to the exhibit.
Based on the FortiClient logs shown in the exhibit, which software application is blocked by the application firewall?
A. Twitter
B. Facebook
C. Firefox
D. Internet Explorer
Question 17
When site categories are disabled in FortiClient webfilter and antivirus (malicious websites), which feature can be used to protect the endpoint from malicious web access?
A. Web exclusion list
B. FortiSandbox URL list
C. Real-time protection list
D. Block malicious websites on antivirus
Question 18
Refer to the exhibits, which show a network topology diagram of ZTNA proxy access and the ZTNA rule configuration.
An administrator runs the diagnose endpoint record list CLI command on FortiGate to check Remote-Client endpoint information, however Remote-Client is not showing up in the endpoint record list.
What is the cause of this issue?
A. Remote-Client failed the client certificate authentication.
B. Remote-Client provided an empty client certificate to connect to the ZTNA access proxy.
C. Remote-Client has not initiated a connection to the ZTNA access proxy.
D. Remote-Client provided an invalid certificate to connect to the ZTNA access proxy.
Question 19
Refer to the exhibit, which shows the endpoint summary information on FortiClient EMS.
What two conclusions can you make based on the Remote-Client status shown above? (Choose two.)
A. The endpoint is classified as at risk.
B. The endpoint has been assigned the Default endpoint policy.
C. The endpoint is configured to support FortiSandbox.
D. The endpoint is currently off-net.
Question 20
Refer to the exhibit, which shows the Zero Trust Tagging Rule Set configuration.
Which two statements about the rule set are true? (Choose two.)
A. The endpoint must satisfy that only Windows 10 is running.
B. The endpoint must satisfy that only AV software is installed and running.
C. The endpoint must satisfy that antivirus is installed and running and Windows 10 is running.
D. The endpoint must satisfy that only Windows Server 2012 R2 is running.
