TAKE NSE 5 Network Security Analyst NSE5_FCT-7.0 PRACTICE QUESTIONS FOR AMAZING RESULTS [Q31-Q52] : Exams Labs Braindumps : http://blog.examslabs.com

QUESTION 31
Which two statements are true about the ZTNA rule? (Choose two. )

It redirects the client request to the access proxy

It defines the access proxy

It applies security profiles to protect traffic

QUESTION 32
Refer to the exhibit.

Based on the logs shown in the exhibit, why did FortiClient EMS fail to install FortiClient on the endpoint?

The remote registry service is not running

The Windows installer service is not running

The task scheduler service is not running.

The FortiClient antivirus service is not running

QUESTION 33
Refer to the exhibit.

Based on the logs shown in the exhibit, why did FortiClient EMS fail to install FortiClient on the endpoint?

The remote registry service is not running

The Windows installer service is not running

The task scheduler service is not running.

The FortiClient antivirus service is not running

QUESTION 34
Refer to the exhibits.

Based on the FortiGate Security Fabric settings shown in the exhibits, what must an administrator do on the EMS server to successfully quarantine an endpoint. when it is detected as a compromised host (loC)?

The administrator must enable remote HTTPS access to EMS.

The administrator must enable FQDN on EMS.

The administrator must authorize FortiGate on FortiAnalyzer.

The administrator must enable SSH access to EMS.

QUESTION 35
What is the function of the quick scan option on FortiClient?

It scans programs and drivers that are currently running, for threats.

It allows users to select a specific file folder on their local hard disk drive (HDD), to scan for threats.

It performs a full system scan including all files, executable files, DLLs, and drivers for threats.

QUESTION 36
Which statement about FortiClient comprehensive endpoint protection is true?

It helps to safeguard systems from email spam

It helps to safeguard systems from data loss.

It helps to safeguard systems from DDoS.

lt helps to safeguard systems from advanced security threats, such as malware.

QUESTION 37
Refer to the exhibit.

Which shows FortiClient EMS deployment profiles.
When an administrator creates a deployment profile on FortiClient EMS, which statement about the deployment profile is true?

Deployment-1 will install FortiClient on new AD group endpoints

Deployment-2 will install FortiClient on both the AD group and workgroup

Deployment-2 will upgrade FortiClient on both the AD group and workgroup

Deployment-1 will upgrade FortiClient only on the workgroup

QUESTION 38
Why does FortiGate need the root CA certificate of FortiClient EMS?

To sign FortiClient CSR requests

To revoke FortiClient client certificates

To trust certificates issued by FortiClient EMS

To update FortiClient client certificates

QUESTION 39
An administrator installs FortiClient EMS in the enterprise.
Which component is responsible for enforcing protection and checking security posture?

FortiClient vulnerability scan

FortiClient EMS tags

FortiClient EMS

FortiClient

QUESTION 40
When site categories are disabled in FortiClient webfilter and antivirus (malicious websites), which feature can be used to protect the endpoint from malicious web access?

Web exclusion list

Real-time protection list

Block malicious websites on antivirus

FortiSandbox URL list

QUESTION 41
Refer to the exhibit, which shows the Zero Trust Tagging Rule Set configuration.

Which two statements about the rule set are true? (Choose two.)

The endpoint must satisfy that only Windows 10 is running.

The endpoint must satisfy that only AV software is installed and running.

The endpoint must satisfy that antivirus is installed and running and Windows 10 is running.

The endpoint must satisfy that only Windows Server 2012 R2 is running.

QUESTION 42
An administrator deploys a FortiClient installation through the Microsoft AD group policy After installation is complete all the custom configuration is missing.
What could have caused this problem?

The FortiClient exe file is included in the distribution package

The FortiClient MST file is missing from the distribution package

FortiClient does not have permission to access the distribution package.

The FortiClient package is not assigned to the group

QUESTION 43
An administrator installs FortiClient on Windows Server.
What is the default behavior of real-time protection control?

Real-time protection must update AV signature database

Real-time protection sends malicious files to FortiSandbox when the file is not detected locally

Real-time protection is disabled

Real-time protection must update the signature database from FortiSandbox

QUESTION 44
A new chrome book is connected in a school’s network.
Which component can the EMS administrator use to manage the FortiClient web filter extension installed on the Google Chromebook endpoint?

FortiClient EMS

FortiClient site categories

FortiClient customer URL list

FortiClient web filter extension

QUESTION 45
Refer to the exhibit.

Based on the settings shown in the exhibit what action will FortiClient take when it detects that a user is trying to download an infected file?

Blocks the infected files as it is downloading

Quarantines the infected files and logs all access attempts

Sends the infected file to FortiGuard for analysis

Allows the infected file to download without scan

QUESTION 46
Refer to the exhibit.

Based on the FortiClient logs shown in the exhibit which endpoint profile policy is currently applied to the FortiClient endpoint from the EMS server?

Default

Compliance rules default

Fortinet- Training

Default configuration policy

QUESTION 47
Refer to the exhibits.

Which shows the configuration of endpoint policies.
Based on the configuration, what will happen when someone logs in with the user account student on an endpoint in the trainingAD domain?

FortiClient EMS will assign the Sales policy

FortiClient EMS will assign the Training policy

FortiClient EMS will assign the Default policy

FortiClient EMS will assign the Training policy for on-fabric endpoints and the Sales policy for the off-fabric endpoint

QUESTION 48
Refer to the exhibit.

Based on the settings shown in the exhibit which statement about FortiClient behavior is true?

FortiClient quarantines infected files and reviews later, after scanning them.

FortiClient blocks and deletes infected files after scanning them.

FortiClient scans infected files when the user copies files to the Resources folder

FortiClient copies infected files to the Resources folder without scanning them.

QUESTION 49
Which two statements are true about the ZTNA rule? (Choose two. )

It enforces access control

It redirects the client request to the access proxy

It defines the access proxy

It applies security profiles to protect traffic

QUESTION 50
An administrator wants to simplify remote access without asking users to provide user credentials.
Which access control method provides this solution?

SSL VPN

ZTNA full mode

L2TP

ZTNA IP/MAC filtering mode

QUESTION 51
Refer to the exhibit.

Based on the settings shown in the exhibit, which action will FortiClient take when users try to access www.facebook.com?

FortiClient will allow access to Facebook

FortiClient will monitor only the user’s web access to the Facebook website

FortiClient will block access to Facebook and its subdomains.

FortiClient will prompt a warning message to warn the user before they can access the Facebook website

QUESTION 52
Refer to the exhibit.

Based on the settings shown in the exhibit what action will FortiClient take when users try to access www facebook com?

FortiClient will allow access to Facebook.

FortiClient will block access to Facebook and its subdomains

FortiClient will prompt a warning message to warn the user before they can access the Facebook website

FortiClient will allow access to Facebook and log user’s web access.