FCP_FCT_AD-7.4 practice questions 11–20

1. Question 11 · 32 in bank

   Select 2

   An administrator is configuring a zero trust network access (ZTNA) access proxy solution to share endpoint information with a FortiGate device. Which two configuration actions will achieve this solution? (Choose two.)

   • AAdd the FortiGate IP address to the Fabric device configurations on FortiClient EMS.
   • BAuthorize FortiGate on FortiClient EMS as a Fabric connector.
   • CUse the FortiClient EMS connector on FortiGate to connect to FortiClient EMS.
   • DApply the ZTNA license on FortiGate.

   Show answer

   Answer: BC

   Next question

2. Question 12 · 32 in bank

   Refer to the exhibit.

   

   Why is the end user denied access to twitter.com?

   • AThey are being blocked by the application firewall endpoint profile.
   • BThey are being blocked by the exclusion list in the web filter endpoint profile.
   • CThey are being blocked by FortiGuard categories in the web filter endpoint profile.
   • DThey are being blocked by the deny list in the malware protection endpoint profile.

   Show answer

   Answer: B

   Next question

3. Question 13 · 32 in bank

   You are performing a proof-of-concept for a Fortinet Endpoint Protection solution. Which endpoint should you install, in addition to FortiClient, as a part of a FortiEndpoint deployment?

   • AFortiPAM
   • BFortiEDR
   • CFortiNAC
   • DFortiMonitor

   Show answer

   Answer: B

   Next question

4. Question 14 · 32 in bank

   Refer to the exhibit.

   

   An administrator notes that no new endpoint data is populated on FortiGate. What is the possible issue?

   • AThe FortiGate connector port is being blocked on FortiClient EMS server.
   • BThe FortiClient EMS CA certificate is not trusted on FortiGate.
   • CFortiGate is not able to reach FortiClient EMS on telemetry port 8013.
   • DFortiGate is not able to reach the IP address or FQDN of the FortiClient EMS server.

   Show answer

   Answer: A

   Next question

5. Question 15 · 32 in bank

   Refer to the exhibit.

   

   FortiGate has lost connectivity with FortiClient EMS. What is causing this problem?

   • AFortiGate is not able to reach the IP address or FQDN of the FortiClient EMS server.
   • BFortiGate is not able to verify the FortiClient EMS serial number.
   • CFortiGate is not able to establish trust using the FortiClient EMS CA certificate.
   • DFortiGate is not able to reach FortiClient EMS on telemetry port 8013.

   Show answer

   Answer: C

   Next question

6. Question 16 · 32 in bank

   How do you remove FortiClient from a quarantine list?

   • ADisconnect the endpoint from FortiClient telemetry.
   • BRevoke the FortiClient certificate.
   • CShut down FortiClient on the endpoint.
   • DUse FortiAnalyzer playbooks.

   Show answer

   Answer: D

   Next question

7. Question 17 · 32 in bank

   An administrator has configured an organization's Security Fabric with FortiGate, FortiClient EMS, and FortiAnalyzer. The organization must provide only compliant endpoints access to their private servers by running FortiClient 7.4 and antivirus with the latest updates. Which tags must the administrator configure to achieve this outcome?

   • AFabric tags
   • BClassification tags
   • CFortiGuard outbreak alert tags
   • DSecurity posture tags

   Show answer

   Answer: D

   Next question

8. Question 18 · 32 in bank

   A security architect has designed a high availability (HA) solution with three FortiClient EMS nodes across two datacenters connected throughsite-to-site IPsec VPN with 1GB of dedicated bandwidth. How can the architect ensure a seamless failover between FortiClient EMS nodes?

   • ALicense each FortiClient EMS server separately.
   • BProvide layer 2 connectivity for the FortiClient EMS servers.
   • CInclude a remote SQL server in the design.
   • DProvide support for active-active HA mode.

   Show answer

   Answer: C

   Next question

9. Question 19 · 32 in bank

   Refer to the exhibit.

   

   What is preventing FortiClient from registering with FortiClient EMS?

   • AFortiClient does not have an available license.
   • BFortiClient failed the certificate check.
   • CFortiClient is not running a supported version.
   • DFortiClient is excluded from management.

   Show answer

   Answer: D

   Next question

10. Question 20 · 32 in bank

    An administrator must perform an initial deployment of FortiClient on domain-joined endpoints. Which method is recommended for the deployment?

    • ASend an email to all domain users including the FortiClient installer.
    • BImport domain endpoints on FortiClient EMS and deploy FortiClient installers to the endpoints.
    • CConfigure domain endpoints to download installers directly from FortiClient cloud service.
    • DUse Group Policy Object (GPO) to install FortiClient on domain endpoints.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

FCP_FCT_AD-7.4 practice, question 11. 32 questions available.