FCP_FCT_AD-7.4 practice questions 21–30

1. Question 21 · 32 in bank

   Refer to the exhibits.

   

   How will the vulnerability shown in the scan be patched?

   • AAn administrator will patch the vulnerability remotely using FortiClient EMS.
   • BThe end user will patch the vulnerability by installing the patch from the vendors website.
   • CThe end user will patch the vulnerability using the FortiClient software.
   • DThe vulnerability will be patched automatically based on the endpoint profile configuration.

   Show answer

   Answer: B

   Next question

2. Question 22 · 32 in bank

   Refer to the exhibit.

   

   Why was the traffic denied access to the zero trust network access (ZTNA) server?

   • AThe client certificate could not be verified by FortiGate.
   • BThe user authentication failed for the remote user.
   • CThe traffic did not match any proxy policy.
   • DThe security posture tags matched a deny policy.

   Show answer

   Answer: D

   Next question

3. Question 23 · 32 in bank

   Refer to the exhibit.

   

   Which method can FortiClient use to register to FortiClient EMS based on the configuration?

   • AFortiClient can connect after providing location authentication.
   • BFortiClient can connect using the IP address of FortiClient EMS.
   • CFortiClient can connect only with an invitation code.
   • DFortiClient can connect to FortiClient EMS using a custom port for telemetry.

   Show answer

   Answer: B

   Next question

4. Question 24 · 32 in bank

   Refer to the exhibit.

   

   Which statement applies to the EMS server certificate configuration shown in the exhibit?

   • AThe FortiCare certificate is used by FortiClient EMS to inspect SSL traffic for Chromebooks.
   • BThe FortiCare certificate is used to encrypt telemetry communication with the endpoints.
   • CThe FortiCare certificate is used to sign certificate requests from endpoints for zero trust network access (ZTNA).
   • DThe FortiCare certificate is used for communication with FortiGate as part of the Security Fabric.

   Show answer

   Answer: C

   Next question

5. Question 25 · 32 in bank

   Refer to the exhibit.

   

   Why was the endpoint denied access to the zero trust network access (ZTNA) server?

   • AFortiGate could not verify user credentials.
   • BFortiGate could not verify the client certificate.
   • CThe security posture failed for the endpoint.
   • DFortiGate was provided with a revoked client certificate.

   Show answer

   Answer: B

   Next question

6. Question 26 · 32 in bank

   Select 2

   The security team plans to leverage their existing Fortinet Security Fabric infrastructure to create an automated response capability to isolate compromised endpoints. Their environment consists of FortiClient EMS, FortiGate firewalls, and FortiAnalyzer. Which two configurations are required to quarantine endpoints based on indicator of compromise (IOC) verdicts from the security fabric deployment? (Choose two.)

   • AA FortiAnalyzer playbook configured to notify FortiGate about IOC incidents
   • BAn automation stitch configured on FortiGate for host quarantine
   • CFortiClient configured to send traffic and security logs to FortiAnalyzer
   • DThe IOC feature enabled in the malware endpoint protection profile

   Show answer

   Answer: BD

   Next question

7. Question 27 · 32 in bank

   An endpoint security administrator is using FortiClient EMS version 7.2.5 to manage 1000 endpoints running FortiClient 7.2.0. The administrator needs to upgrade their environment to FortiClient EMS 7.4 to take advantage of new features. Which method should the FortiClient EMS administrator use to upgrade FortiClient EMS from version 7.2.5 to version 7.4?

   • AUpgrade the Microsoft SQL database and then upgrade to FortiClient EMS 7.4.
   • BUse the migration tool available on Fortinet support site.
   • CUpgrade FortiClient EMS using the 7.4 installation file.
   • DManually back up the database on FortiClient EMS 7.2.5 and then upgrade it on FortiClient EMS 7.4.

   Show answer

   Answer: C

   Next question

8. Question 28 · 32 in bank

   In a FortiClient EMS deployment, what is the primary security function of the endpoint control certificate?

   • AIt is used to encrypt the telemetry connection from FortiClient to FortiClient EMS.
   • BIt is used by FortiClient Web Filter extension to perform SSL inspection on web traffic.
   • CIt is used to secure communication with FortiGate as part of the Security Fabric.
   • DIt is used to sign certificate requests from endpoints for zero trust network access (ZTNA).

   Show answer

   Answer: A

   Next question

9. Question 29 · 32 in bank

   Refer to the exhibits.

   

   Antivirus software is installed on a Windows 10 endpoint, but the windows application firewall is stopping it from running. Which action will FortiClient take on the endpoint?

   • AFortiClient will quarantine the endpoint until compliant.
   • BFortiClient will tag the endpoint as non-compliant.
   • CFortiClient will notify the user to enable antivirus.
   • DFortiClient telemetry will be disconnected because of failed compliance.

   Show answer

   Answer: B

   Next question

10. Question 30 · 32 in bank

    An administrator must inspect the dropbox Software-as-a-Servie (SaaS) traffic on FortiGate for offnet FortiClient users. Which configuration will achieve this?

    • AConfigure the ZTNA server on FortiGate with service HTTPS.
    • BEnable the cloud access security broker (CASB) feature in a web filter endpoint profile.
    • CCreate a standard firewall policy with inline-CASB enabled and dropbox as destination.
    • DAdd dropbox to the zero trust network access (ZTNA) destinations endpoint profile on FortiClient EMS.

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

FCP_FCT_AD-7.4 practice, question 21. 32 questions available.