Free Fortinet NSE 7 – Zero Trust Access 7.2 Exam NSE7_ZTA-7.2 Exam Practice Test

What happens when FortiClient EMS is configured as an MDM connector on FortiNAC?

• FortiNAC sends the host data to FortiClient EMS to update its host database
• FortiClient EMS verifies with FortiNAC that the device is registered
• FortiNAC polls FortiClient EMS periodically to update already registered hosts in FortiNAC
• FortiNAC checks for device vulnerabilities and compliance with FortiClient

Which one of the supported communication methods does FortiNAC use for initial device identification during discovery?

• LLDP
• SNMP
• API
• SSH

Which two types of configuration can you associate with a user/host profile on FortiNAC? (Choose two.)

• Service Connectors
• Network Access
• Inventory
• Endpoint compliance

FortiNAC has alarm mappings configured for MDM compliance failure, and FortiClient EMS is added as a MDM connector When an endpoint is quarantined by FortiClient EMS, what action does FortiNAC perform?

• The host is isolated in the registration VLAN
• The host is marked at risk
• The host is forced to authenticate again
• The host is disabled

An administrator wants to prevent direct host-to-host communication at layer 2 and use only FortiGate to inspect all the VLAN traffic What three things must the administrator configure on FortiGate to allow traffic between the hosts? (Choose three.)

• Configure proxy ARP to allow traffic
• Block intra-VLAN traffic in the VLAN interface settings
• Add the VLAN interface to a software switch
• Configure static routes to allow subnets
• Configure a firewall policy to allow the desired traffic between hosts

Which statement is true about FortiClient EMS in a ZTNA deployment?Uses endpoint information to grant or deny access to the networkProvides network and user identity authentication servicesGenerates and installs client certificates on managed endpointsActs as ZTNA access proxy for managed endpoints

Which configuration is required for FortiNAC to perform an automated incident response based on the FortiGate traffic?

• FortiNAC should be added as a participant in the Security Fabric
• FortiNAC requires read-write SNMP access to FortiGate.
• FortiNAC should be configured as a syslog server on FortiGate
• FortiNAC requires HTTPS access to FortiGate for API calls

Which three core products are mandatory in the Fortinet ZTNA solution'' {Choose three.)

• FortiClient EMS
• FortiClient
• FortiToken
• FortiGate
• FortiAuthenticator

Which three methods can you use to trigger layer 2 polling on FortiNAC? (Choose three)

• Polling scripts
• Link traps
• Manual polling
• Scheduled tasks
• Polling using API

What are the three core principles of ZTA? (Choose three.)

• Verity
• Be compliant
• Certify
• Minimal access
• Assume breach