Free Fortinet NSE 5 – FortiClient EMS 7.0 Exam NSE5_FCT-7.0 Exam Practice Test

When site categories are disabled in FortiClient webfilter and antivirus (malicious websites), which feature can be used to protect the endpoint from malicious web access?

• Web exclusion list
• Real-time protection list
• Block malicious websites on antivirus
• FortiSandbox URL list

Which security fabric component sends a notification to quarantine an endpoint after IOC detection in the automation process?

• FortiAnalyzer
• FortiClient
• ForbClient EMS
• Forti Gate

An administrator configures ZTNA configuration on the FortiGate for remote users. Which statement is true about the firewall policy?

• It enforces access control
• It redirects the client request to the access proxy
• It defines the access proxy
• It applies security profiles to protect traffic

An administrator installs FortiClient on Windows Server.What is the default behavior of real-time protection control?

• Real-time protection must update AV signature database
• Real-time protection sends malicious files to FortiSandbox when the file is not detected locally
• Real-time protection is disabled
• Real-time protection must update the signature database from FortiSandbox

An administrator installs FortiClient EMS in the enterprise.Which component is responsible for enforcing protection and checking security posture?

• FortiClient vulnerability scan
• FortiClient EMS tags
• FortiClient EMS
• FortiClient

A FortiClient EMS administrator has enabled the compliance rule for the sales department. Which Fortinet device will enforce compliance with dynamic access control?

• FortiClient
• FortiClient EMS
• FortiGate
• FortiAnalyzer

What does FortiClient do as a fabric agent? (Choose two.)

• Provides application inventory
• Provides IOC verdicts
• Automates Responses
• Creates dynamic policies

An administrator has a requirement to add user authentication to the ZTNA access for remote or off-fabric users Which FortiGate feature is required m addition to ZTNA?

• FortiGate FSSO
• FortiGate certificates
• FortiGate explicit proxy
• FortiGate endpoint control

An administrator is required to maintain a software vulnerability on the endpoints, without showing the feature on the FortiClient dashboard. What must the administrator do to achieve this requirement?

• Disable select the vulnerability scan feature in the deployment package
• Use the default endpoint profile
• Select the vulnerability scan feature in the deployment package, but disable the feature on the endpoint profile
• Click the hide icon on the vulnerability scan tab

An administrator wants to simplify remote access without asking users to provide user credentials.Which access control method provides this solution'?

• SSL VPN
• ZTNA full mode
• L2TP
• ZTNA IP/MAC filtering mode