السؤال #1

An administrator must add an authentication server on FortiClient EMS in a different security zone that cannot allow a direct connection.Which solution can provide secure access between FortiClient EMS and the Active Directory server?

A. Configure and deploy a FortiGate device between FortiClient EMS and the Active Directory server

B. Configure Active Directory and install FortiClient EMS on the same VM

C. Configure a slave FortiClient EMS on a virtual machine

D. Configure an Active Directory connector between FortiClient EMS and the Active Directory server

عرض الإجابة

اجابة صحيحة: A

السؤال #2

An administrator has lost web access to the FortiClient EMS console, and the web page to access to the console is timing out.How can the administrator gather information to investigate the issue?

A. Use the CLI diagnostic tool on the EMS server

B. Download the webserver logs from the PostgreSQL server

C. Use the diagnostic logs option from the FortiClient EMS GUI

D. Download the log generator from the support site and run it on the EMS server

عرض الإجابة

اجابة صحيحة: A

السؤال #3

Which three types of antivirus scans are available on FortiClient? (Choose three )

A. Proxy scan

B. Full scan

C. Custom scan

D. Flow scan

E. Quick scan

عرض الإجابة

اجابة صحيحة: BCE

السؤال #4

An administrator installs FortiClient on Windows Server.What is the default behavior of real-time protection control?

A. eal-time protection must update the signature database from FortiSandbox

B. eal-time protection is disabled

C. eal-time protection sends malicious files to FortiSandbox when the file is not detected locally

D. eal-time protection must update AV signature database

عرض الإجابة

اجابة صحيحة: B

السؤال #5

An administrator wants to simplify remote access without asking users to provide user credentials Which access control method provides this solution?

A. 2TP

B. TNA full mode

C. TNA IP/MAC littering mode

D. SL VPN

عرض الإجابة

اجابة صحيحة: B

السؤال #6

A FortiClient EMS administrator has enabled the compliance rule for the sales department Which Fortinet device will enforce compliance with dynamic access control?

A. FortiClient

B. FortiClient EMS

C. FortiGate

D. FortiAnalyzer

عرض الإجابة

اجابة صحيحة: C

السؤال #7

Refer to the exhibit, which shows FortiClient EMS deployment, profiles.When an administrator creates a deployment profile on FortiClient EMS. which statement about the deployment profile is true?

A. Deployment-2 will upgrade FortiClient on both the AD group and workgroup

B. Deployment-1 will install FortiClient on new AO group endpoints

C. Deployment-2 will install FortiClient on both the AD group and workgroup

D. Deployment-1 will upgrade FortiClient only on the workgroup

عرض الإجابة

اجابة صحيحة: A

السؤال #8

Exhibit.Based on the logs shown in the exhibit, why did FortiClient EMS tail to install FortiClient on the endpoint?

A. The FortiClient antivirus service is not running

B. The Windows installer service is not running

C. The remote registry service is not running

D. The task scheduler service is not running

عرض الإجابة

اجابة صحيحة: D

السؤال #9

Exhibit.Based on the logs shown in the exhibit, why did FortiClient EMS tail to install FortiClient on the endpoint?

A. The FortiClient antivirus service is not running

B. The Windows installer service is not running

C. The remote registry service is not running

D. The task scheduler service is not running

عرض الإجابة

اجابة صحيحة: D

السؤال #10

In a ForliSandbox integration, what does the remediation option do?

A. Deny access to a tile when it sees no results

B. Alert and notify only

C. Exclude specified files

D. Wait for FortiSandbox results before allowing files

عرض الإجابة

اجابة صحيحة: B

السؤال #11

When multitenancy is enabled on FortiClient EMS, which administrator role can provide access to the global site only?

A. Tenant administrator

B. Settings administrator

C. Standard administrator

D. Global administrator

عرض الإجابة

اجابة صحيحة: D

السؤال #12

An administrator must add an authentication server on FortiClient EMS in a different security zone that cannot allow a direct connection.Which solution can provide secure access between FortiClient EMS and the Active Directory server?

A. Configure and deploy a FortiGate device between FortiClient EMS and the Active Directory server

B. Configure Active Directory and install FortiClient EMS on the same VM

C. Configure a slave FortiClient EMS on a virtual machine

D. Configure an Active Directory connector between FortiClient EMS and the Active Directory server

عرض الإجابة

اجابة صحيحة: A

السؤال #13

An administrator must add an authentication server on FortiClient EMS in a different security zone that cannot allow a direct connection.Which solution can provide secure access between FortiClient EMS and the Active Directory server?

A. Configure and deploy a FortiGate device between FortiClient EMS and the Active Directory server

B. Configure Active Directory and install FortiClient EMS on the same VM

C. Configure a slave FortiClient EMS on a virtual machine

D. Configure an Active Directory connector between FortiClient EMS and the Active Directory server

عرض الإجابة

اجابة صحيحة: A

السؤال #14

An administrator has a requirement to add user authentication to the ZTNA access for remote or off-fabric users Which FortiGate feature is required m addition to ZTNA?

A. FortiGate FSSO

B. FortiGate certificates

C. FortiGate explicit proxy

D. FortiGate endpoint control

عرض الإجابة

اجابة صحيحة: C

السؤال #15

When site categories are disabled in FortiClient web filter, which feature can be used to protect the endpoint from malicious web access?

A. Real-time protection list

B. Block malicious websites on antivirus

C. FortiSandbox URL list

D. Web exclusion list

عرض الإجابة

اجابة صحيحة: D

السؤال #16

Refer to the exhibits. Which shows the configuration of endpoint policies.Based on the configuration, what will happen when someone logs in with the user account student on an endpoint in the trainingAD domain?

A. ortiClient EMS will assign the Training policy

B. ortiClient EMS will assign the Default policy

C. ortiClient EMS will assign the Training policy for on-fabric endpoints and the Sales policy for the off-fabric endpoint

D. ortiClient EMS will assign the Sales policy

عرض الإجابة

اجابة صحيحة: A

السؤال #17

Refer to the exhibit, which shows FortiClient EMS deployment, profiles.When an administrator creates a deployment profile on FortiClient EMS. which statement about the deployment profile is true?

A. Deployment-2 will upgrade FortiClient on both the AD group and workgroup

B. Deployment-1 will install FortiClient on new AO group endpoints

C. Deployment-2 will install FortiClient on both the AD group and workgroup

D. Deployment-1 will upgrade FortiClient only on the workgroup

عرض الإجابة

اجابة صحيحة: A

السؤال #18

An administrator wants to simplify remote access without asking users to provide user credentials Which access control method provides this solution?

A. ZTNA full mode

B. SSL VPN

C. L2TP

D. ZTNA IP/MAC littering mode

عرض الإجابة

اجابة صحيحة: A

السؤال #19

An administrator needs to connect FortiClient EMS as a fabric connector to FortiGate What is the prerequisite to get FortiClient EMS lo connect to FortiGate successfully?

A. Import and verify the FortiClient EMS tool CA certificate on FortiGate

B. Revoke and update the FortiClient client certificate on EMS

C. Import and verify the FortiClient client certificate on FortiGate

D. Revoke and update the FortiClient EMS root CA

عرض الإجابة

اجابة صحيحة: A

السؤال #20

Refer to the exhibits.Which show the Zero Trust Tag Monitor and the FortiClient GUI status.Remote-Client is tagged as Remote-Users on the FortiClient EMS Zero Trust Tag Monitor.What must an administrator do to show the tag on the FortiClient GUI?

A. Update tagging rule logic to enable tag visibility

B. Change the FortiClient system settings to enable tag visibility

C. Change the endpoint control setting to enable tag visibility

D. Change the user identity settings to enable tag visibility

عرض الإجابة

اجابة صحيحة: B

السؤال #21

Which two statements are true about ZTNA? {Choose two.)

A. ZTNA manages access for remote users only

B. ZTNA provides role-based access

C. ZTNA provides a security posture check

D. ZTNA manages access through the client only

عرض الإجابة

اجابة صحيحة: BC

السؤال #22

Refer to the exhibit.The zero trust network access (ZTNA) serial number on endpoint br-pc-1 is in a disabled state.What is causing the problem?

A. The ZTNAfeature is not installed on FortiClient

B. The ZTNAdestinations endpoint profile is disabled

C. The ZTNA is disabled due to FortiClient disconnected from FortiClient EMS

D. The ZTNA certificate has been revoked by administrator

عرض الإجابة

اجابة صحيحة: C

السؤال #23

A new chrome book is connected in a school's network.Which component can the EMS administrator use to manage the FortiClient web filter extension installed on the Google Chromebook endpoint?

A. ortiClient web filter extension

B. ortiClient customer URL list

C. ortiClient EMS

D. ortiClient site categories

عرض الإجابة

اجابة صحيحة: C

السؤال #24

Refer to the exhibit. Based on the settings shown in the exhibit which statement about FortiClient behavior is true?

A. ortiClient copies infected files to the Resources folder without scanning them

B. ortiClient scans infected files when the user copies files to the Resources folder

C. ortiClient quarantines infected files and reviews later, after scanning them

D. ortiClient blocks and deletes infected files after scanning them

عرض الإجابة

اجابة صحيحة: C

السؤال #25

Which two statements about FortiClient EMS integration with Active Directory (AD) are true? (Choose two.)

A. FortiClient EMS has full read-write access on the AD server

B. FortiClient installations on domain endpoints can deployed from FortiClient EMS

C. Endpoint profiles can be assigned to endpoints based on domain groups

D. Imported AD endpoints cannot be directly deleted on FortiClient EMS

عرض الإجابة

اجابة صحيحة: CD

السؤال #26

Which two statements are true about ZTNA? {Choose two.)

A. ZTNA manages access for remote users only

B. ZTNA provides role-based access

C. ZTNA provides a security posture check

D. ZTNA manages access through the client only

عرض الإجابة

اجابة صحيحة: BC

السؤال #27

An administrator wants to simplify remote access without asking users to provide user credentials Which access control method provides this solution?

A. ZTNA full mode

B. SSL VPN

C. L2TP

D. ZTNA IP/MAC littering mode

عرض الإجابة

اجابة صحيحة: A

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان

View The Updated Fortinet Exam Questions

عرض الإجابات بعد التقديم

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع! احصل الان

View The Updated Fortinet Exam Questions

عرض الإجابات بعد التقديم

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان