QUESTION: 25

Refer to the exhibit.

Based on the settings shown in the exhibit, which two actions must the administrator take to make the endpoint compliant? (Choose two.)

Enable the web filter profile.
Run Calculator application on the endpoint.
Integrate FortiSandbox tor infected file analysis
Patch applications that have vulnerability rated as high or above.

Answer(s): B,D

Explanation:

Observation of Compliance Profile:

The compliance profile shown in the exhibit includes rules for vulnerability severity level and running process (Calculator.exe).

Evaluating Actions for Compliance:

To make the endpoint compliant, the administrator needs to ensure that the vulnerability severity level is medium or higher is patched (D).

Additionally, the Calculator.exe application must be running on the endpoint (B).

Eliminating Incorrect Options:

Enabling the web filter profile (A) is not related to the compliance rules shown.

Integrating FortiSandbox (C) is not a requirement in the given compliance profile.

Conclusion:

The correct actions are to run the Calculator application on the endpoint (B) and patch applications with vulnerabilities rated as high or above (D).

Reference:

FortiClient EMS compliance profile configuration documentation from the study guides.

Reveal Solution Next Question

QUESTION: 26

FortiClient EMS endpoint policies

Refer to the exhibit, which shows multiple endpoint policies on FortiClient EMS.
Which policy is applied to the endpoint in the AD group trainingAD

The Training policy
Both the Sales and Training policies because their priority is higher than the Default policy
The Default policy because it has the highest priority
The sales policy

Answer(s): A

Explanation:

Observation of Endpoint Policies:

The exhibit shows multiple endpoint policies with their assigned groups, priority levels, and enabled status.

Evaluating Policy Assignment:

The Training policy is specifically assigned to the "trainingAD.training.lab" group, with a higher priority than the Default policy.

Conclusion:

The correct policy applied to the endpoint in the AD group "trainingAD" is the Training policy (A).

Reference:

FortiClient EMS policy configuration and priority management documentation from the study guides.

Reveal Solution Next Question

QUESTION: 27

Which two statements are true about the ZTNA rule? (Choose two.)

It applies security profiles to protect traffic
It applies SNAT to protect traffic.
It defines the access proxy.
It enforces access control.

Answer(s): A,D

Explanation:

Understanding ZTNA Rule Configuration:

The ZTNA rule configuration shown in the exhibit defines how traffic is managed and controlled based on specific tags and conditions.

Evaluating Rule Components:

The rule includes security profiles to protect traffic by applying various security checks (A).

The rule also enforces access control by determining which endpoints can access the specified resources based on the ZTNA tag (D).

Eliminating Incorrect Options:

SNAT (Source Network Address Translation) is not mentioned as part of this ZTNA rule.

The rule does not define the access proxy but uses it to enforce access control.

Conclusion:

The correct statements about the ZTNA rule are that it applies security profiles to protect traffic (A) and enforces access control (D).

Reference:

ZTNA rule configuration documentation from the study guides.

Reveal Solution Next Question

QUESTION: 28

An administrator is required to maintain a software vulnerability on the endpoints, without showing the feature on the FortiClient.
What must the administrator do to achieve this requirement?

Select the vulnerability scan feature in the deployment package, but disable the feature on the endpoint profile
Disable select the vulnerability scan feature in the deployment package
Click the hide icon on the vulnerability scan profile assigned to endpoint
Use the default endpoint profile

Answer(s): C

Explanation:

Requirement Analysis:

The administrator needs to maintain a software vulnerability scan on endpoints without showing the feature on FortiClient.

Evaluating Options:

Disabling the feature in the deployment package or endpoint profile would remove the functionality entirely, which is not desired.

Using the default endpoint profile may not meet the specific requirement of hiding the feature.

Clicking the hide icon on the vulnerability scan profile assigned to the endpoint will keep the feature active but hidden from the user's view.

Conclusion:

The correct action is to click the hide icon on the vulnerability scan profile assigned to the endpoint (C).

Reference:

FortiClient EMS feature configuration and management documentation from the study guides.

Reveal Solution Next Question

Free FCP_FCT_AD-7.2 Exam Braindumps (page: 7)

QUESTION: 25

Explanation:

Reference:

QUESTION: 26

Explanation:

Reference:

QUESTION: 27

Explanation:

Reference:

QUESTION: 28

Explanation:

Reference: