All About Precise NSE5_FCT-7.0 Prep

NEW QUESTION 1
An administrator needs to connect FortiClient EMS as a fabric connector to FortiGate. What is the prerequisite to get FortiClient EMS to connect to FortiGate successfully?

• A. Revoke and update the FortiClient EMS root CA.
• B. Revoke and update the FortiClient client certificate on EMS.
• C. Import and verify the FortiClient client certificate on FortiGate.
• D. Import and verify the FortiClient EMS root CA certificate on FortiGate

Answer: D

NEW QUESTION 2
Refer to the exhibit.

An administrator has restored the modified XML configuration file to FortiClient and sees the error shown in the exhibit.
Based on the XML settings shown in the exhibit, what must the administrator do to resolve the issue with the XML configuration file?

• A. The administrator must resolve the XML syntax error.
• B. The administrator must use a password to decrypt the file
• C. The administrator must change the file size
• D. The administrator must save the file as FortiClient-config conf.

Answer: A

NEW QUESTION 3
Refer to the exhibits.


Which shows the configuration of endpoint policies.
Based on the configuration, what will happen when someone logs in with the user account student on an endpoint in the trainingAD domain?

• A. FortiClient EMS will assign the Sales policy
• B. FortiClient EMS will assign the Training policy
• C. FortiClient EMS will assign the Default policy
• D. FortiClient EMS will assign the Training policy for on-fabric endpoints and the Sales policy for the off-fabric endpoint

Answer: B

NEW QUESTION 4
Refer to the exhibit.

Which shows multiple endpoint policies on FortiClient EMS.
Which policy is applied to the endpoint in the AD group trainingAD?

• A. The Sales policy
• B. The Training policy
• C. Both the Sales and Training policies because their priority is higher than the Default policy
• D. The Default policy because it has the highest priority

Answer: B

NEW QUESTION 5
An administrator installs FortiClient on Windows Server. What is the default behavior of real-time protection control?

• A. Real-time protection must update AV signature database
• B. Real-time protection sends malicious files to FortiSandbox when the file is not detected locally
• C. Real-time protection is disabled
• D. Real-time protection must update the signature database from FortiSandbox

Answer: C

NEW QUESTION 6
Refer to the exhibit.

Based on the settings shown in the exhibit which statement about FortiClient behavior is true?

• A. FortiClient quarantines infected files and reviews later, after scanning them.
• B. FortiClient blocks and deletes infected files after scanning them.
• C. FortiClient scans infected files when the user copies files to the Resources folder
• D. FortiClient copies infected files to the Resources folder without scanning them.

Answer: B

NEW QUESTION 7
In a FortiSandbox integration, what does the remediation option do?

• A. Wait for FortiSandbox results before allowing files
• B. Exclude specified files
• C. Alert and notify only
• D. Deny access to a file when it sees no results

Answer: C

NEW QUESTION 8
An administrator is required to maintain a software inventory on the endpoints. without showing the feature on the FortiClient dashboard What must the administrator do to achieve this requirement?

• A. The administrator must use default endpoint profile
• B. The administrator must not select the vulnerability scan feature in the deployment package.
• C. The administrator must select the vulnerability scan feature in the deployment package, but disable the feature on the endpoint profile
• D. The administrator must click the hide icon on the vulnerability scan tab

Answer: D

NEW QUESTION 9
Refer to the exhibits.


Based on the FortiGate Security Fabric settings shown in the exhibits, what must an administrator do on the EMS server to successfully quarantine an endpoint. when it is detected as a compromised host (loC)?

• A. The administrator must enable remote HTTPS access to EMS.
• B. The administrator must enable FQDN on EMS.
• C. The administrator must authorize FortiGate on FortiAnalyzer.
• D. The administrator must enable SSH access to EMS.

Answer: A

NEW QUESTION 10
An administrator deploys a FortiClient installation through the Microsoft AD group policy After installation is complete all the custom configuration is missing.
What could have caused this problem?

• A. The FortiClient exe file is included in the distribution package
• B. The FortiClient MST file is missing from the distribution package
• C. FortiClient does not have permission to access the distribution package.
• D. The FortiClient package is not assigned to the group

Answer: D

NEW QUESTION 11
Refer to the exhibit.


Which shows the output of the ZTNA traffic log on FortiGate. What can you conclude from the log message?

• A. The remote user connection does not match the explicit proxy policy.
• B. The remote user connection does not match the ZTNA server configuration.
• C. The remote user connection does not match the ZTNA rule configuration.
• D. The remote user connection does not match the ZTNA firewall policy

Answer: D

NEW QUESTION 12
What action does FortiClient anti-exploit detection take when it detects exploits?

• A. Blocks memory allocation to the compromised application process
• B. Patches the compromised application process
• C. Deletes the compromised application process

Answer: A

NEW QUESTION 13
Which two VPN types can a FortiClient endpoint user inmate from the Windows command prompt? (Choose two)

• A. L2TP
• B. PPTP
• C. IPSec
• D. SSL VPN

Answer: CD

NEW QUESTION 14
Refer to the exhibits, which show a network topology diagram of ZTNA proxy access and the ZTNA rule configuration.


An administrator runs the diagnose endpoint record list CLI command on FortiGate to check Remote-Client endpoint information, however Remote-Client is not showing up in the endpoint record list.
What is the cause of this issue?

• A. Remote-Client failed the client certificate authentication.
• B. Remote-Client provided an empty client certificate to connect to the ZTNA access proxy.
• C. Remote-Client has not initiated a connection to the ZTNA access proxy.
• D. Remote-Client provided an invalid certificate to connect to the ZTNA access proxy.

Answer: C

NEW QUESTION 15
An administrator has a requirement to add user authentication to the ZTNA access for remote or off-fabric users Which FortiGate feature is required m addition to ZTNA?

• A. FortiGate FSSO
• B. FortiGate certificates
• C. FortiGate explicit proxy
• D. FortiGate endpoint control

Answer: C

NEW QUESTION 16
......