Question 31
Refer to the exhibit, which shows the output of the ZTNA traffic log on FortiGate.
What can you conclude from the log message?
A. The remote user connection does not match the explicit proxy policy.
B. The remote user connection does not match the ZTNA server configuration.
C. The remote user connection does not match the ZTNA firewall policy.
D. The remote user connection does not match the ZTNA rule configuration.
Question 32
A FortiClient EMS administrator has enabled the compliance rule for the sales department.
Which Fortinet device will enforce compliance with dynamic access control?
A. FortiAnalyzer
B. FortiClient EMS
C. FortiGate
D. FortiClient
Question 33
Which three features does FortiClient endpoint security include? (Choose three.)
A. Real-time protection
B. IPsec
C. Vulnerability management
D. DLP
E. L2TP
Question 34
Refer to the exhibit.
Based on the settings shown in the exhibit, which two actions must the administrator take to make the endpoint compliant? (Choose two.)
A. Enable the webfilter profile.
B. Integrate FortiSandbox for infected file analysis.
C. Patch applications that have vulnerability rated as high or above.
D. Run Calculator application on the endpoint.
Question 35
Which security fabric component sends a notification to quarantine an endpoint after IOC detection in the automation process?
A. FortiClient EMS
B. FortiAnalyzer
C. FortiClient
D. FortiGate
Question 36
Refer to the exhibit, which shows FortiClient EMS deployment profiles.
When an administrator creates a deployment profile on FortiClient EMS, which statement about the deployment profile is true?
A. Deployment-2 will install FortiClient on both the AD group and workgroup.
B. Deployment-2 will upgrade FortiClient on both the AD group and workgroup.
C. Deployment-1 will install FortiClient on new AD group endpoints.
D. Deployment-1 will upgrade FortiClient only on the workgroup.
Question 37
Refer to the exhibit.
Based on the FortiClient log details shown in the exhibit, which two statements are true? (Choose two.)
A. The filename is sent to FortiSandbox for further inspection.
B. The file status is Quarantined.
C. The file location is \??\D:\Users\.
D. The filename is Unconfirmed 899290.crdownload.
Question 38
Refer to the exhibit, which shows multiple endpoint policies on FortiClient EMS.
Which policy is applied to the endpoint in the AD group trainingAD?
A. Both the Sales and Training policies because their priority is higher than the Default policy
B. The Training policy
C. The Default policy because it has the highest priority
D. The Sales policy
Question 39
An administrator has a requirement to add user authentication to the ZTNA access for remote or off-fabric users.
Which FortiGate feature is required in addition to ZTNA?
A. FortiGate endpoint control
B. FortiGate certificates
C. FortiGate FSSO
D. FortiGate explicit proxy
Question 40
What does FortiClient do as a fabric agent? (Choose two.)
A. Provides application inventory
B. Provides IOC verdicts
C. Automates Responses
D. Creates dynamic policies
