Fortinet FCP - FortiClient EMS 7.4 Administrator - FCP_FCT

QUESTION NO: 1
Which three features does FortiClient endpoint security include? (Choose three.)

A. Real-lime protection B. lPsec C. DLP D. Vulnerability management E. L2TP

Correct Answer: A,B,D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 2
Refer to the exhibits. Based on the FortiGate Security Fabric settings shown in the exhibits, what must an administrator do on the EMS server to successfully quarantine an endpoint. When it is detected as a compromised host (loC)?

A. The administrator must authorize FortiGate on FortiAnalyzer. B. The administrator must enable SSH access to EMS. C. The administrator must enable remote HTTPS access to EMS. D. The administrator must enable FQDN on EMS.

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 3
Refer to the exhibit. Based on the settings shown in the exhibit, which statement about FortiClient behaviour is true?

A. FortiClient copies infected files to the Resources folder without scanning them. B. FortiClient scans infected files when the user copies files to the Resources folder. C. FortiClient blocks and deletes infected files after scanning them. D. FortiClient quarantines infected files and reviews later, after scanning them.

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 4
Refer to the exhibit. Why was the traffic denied access to the zero trust network access (ZTNA) server?

A. The traffic did not match any proxy policy. B. The user authentication failed for the remote user. C. The client certificate could not be verified by FortiGate. D. The security posture tags matched a deny policy.

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 5
Refer to the exhibit, which shows FortiClient EMS deployment, profiles.

When an administrator creates a deployment profile on FortiClient EMS.
Which statement about the deployment profile is true?

A. Deployment-1 will install FortiClient on new AO group endpoints. B. Deployment-2 will install FortiClient on both the AD group and workgroup. C. Deployment-2 will upgrade FortiClient on both the AD group and workgroup. D. Deployment-1 will upgrade FortiClient only on the workgroup.

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 6
An administrator is configuring a zero trust network access (ZTNA) access proxy solution to share endpoint information with a FortiGate device.
Which two configuration actions will achieve this solution? (Choose two.)

A. Authorize FortiGate on FortiClient EMS as a Fabric connector. B. Apply the ZTNA license on FortiGate. C. Use the FortiClient EMS connector on FortiGate to connect to FortiClient EMS. D. Add the FortiGate IP address to the Fabric device configurations on FortiClient EMS.

Correct Answer: A,C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 7
Refer to the exhibit, which shows multiple endpoint policies on FortiClient EMS.
Which policy is applied to the endpoint in the AD group trainingAD?

A. The Default policy because it has the highest priority B. Both the Sales and Training policies because their priority is higher than the Default policy C. The sales policy D. The Training policy

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 8
Which security fabric component sends a notification to quarantine an endpoint after IOC detection in the automation process?

A. FortiGate B. FortiAnalyzer C. FortiClient EMS D. FortiClient

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 9
Refer to the exhibit. Based on the FortiClient tog details shown in the exhibit, which two statements are true? (Choose two.)

A. The filename is Unconfirmed 899290.crdownload. B. The file location is \??\D:\Users\. C. The file status is Quarantined D. The filename is sent to FortiSandbox for further inspection.

Correct Answer: A,C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 10
Refer to the exhibits, which show a network topology diagram of ZTNA proxy access and the ZTNA rule configuration.
An administrator runs the diagnose endpoint record list CLI command on FortiGate to check Remote-Client endpoint information, however Remote-Client is not showing up in the endpoint record list.
What is the cause of this issue?

A. Remote-Client provided an invalid certificate to connect to the ZTNA access proxy. B. Remote-Client has not initiated a connection to the ZTNA access proxy. C. Remote-Client failed the client certificate authentication. D. Remote-Client provided an empty client certificate to connect to the ZTNA access proxy.

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

Fortinet FCP - FortiClient EMS 7.4 Administrator - FCP_FCT_AD-7.4 Exam Questions