Fortinet NSE 5 - FortiClient EMS 7.0 - NSE5_FCT-7.0 Exam Questions [2026]

QUESTION NO: 1
An administrator configures ZTNA configuration on the FortiGate for remote users. Which statement is true about the firewall policy?

A. It applies security profiles to protect traffic B. It defines the access proxy C. It redirects the client request to the access proxy D. It enforces access control

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 2
Refer to the exhibit.

Which shows FortiClient EMS deployment profiles.
When an administrator creates a deployment profile on FortiClient EMS, which statement about the deployment profile is true?

A. Deployment-1 will upgrade FortiClient only on the workgroup B. Deployment-2 will upgrade FortiClient on both the AD group and workgroup C. Deployment-2 will install FortiClient on both the AD group and workgroup D. Deployment-1 will install FortiClient on new AD group endpoints

Correct Answer: B

QUESTION NO: 3
Which two statements are true about ZTNA? (Choose two.)

A. ZTNA manages access through the client only B. ZTNA provides a security posture check C. ZTNA manages access for remote users only D. ZTNA provides role-based access

Correct Answer: B,D

QUESTION NO: 4
Which three types of antivirus scans are available on FortiClient? (Choose three )

A. Custom scan B. Proxy scan C. Quick scan D. Full scan E. Flow scan

Correct Answer: A,C,D

QUESTION NO: 5
Which security fabric component sends a notification to quarantine an endpoint after IOC detection in the automation process?

A. Forti Gate B. FortiAnalyzer C. ForbClient EMS D. FortiClient

Correct Answer: B

QUESTION NO: 6
Refer to the exhibits.

Based on the FortiGate Security Fabric settings shown in the exhibits, what must an administrator do on the EMS server to successfully quarantine an endpoint. when it is detected as a compromised host (loC)?

A. The administrator must authorize FortiGate on FortiAnalyzer. B. The administrator must enable SSH access to EMS. C. The administrator must enable remote HTTPS access to EMS. D. The administrator must enable FQDN on EMS.

Correct Answer: C