FCP_FCT_AD-7.2 Practice Test

A new chrome book is connected in a school's network.
Which component can the EMS administrator use to manage the FortiClient web filter extension installed on the Google Chromebook endpoint?

A. FortiClient EMS

B. FortiClient site categories

C. FortiClient customer URL list

D. FortiClient web filter extension

Which two statements are true about the ZTNA rule? (Choose two.)

A. It applies security profiles to protect traffic

B. It applies SNAT to protect traffic.

C. It defines the access proxy.

D. It enforces access control.

Why does FortiGate need the root CA certificate of FortiCient EMS?

A. To revoke FortiClient client certificates

B. To sign FortiClient CSR requests

C. To update FortiClient client certificates

D. To trust certificates issued by FortiClient EMS

An administrator has a requirement to add user authentication to the ZTNA access for remote or off-fabric users Which FortiGate feature is required m addition to ZTNA?

A. FortiGate FSSO

B. FortiGate certificates

C. FortiGate explicit proxy

D. FortiGate endpoint control

ZTNA Network Topology



Refer to the exhibits, which show a network topology diagram of ZTNA proxy access and the ZTNA rule configuration.
An administrator runs the diagnose endpoint record list CLI command on FortiGate to check Remote-Client endpoint information, however Remote-Client is not showing up in theendpoint record list.
What is the cause of this issue?

A. Remote-Client has not initiated a connection to the ZTNA access proxy.

B. Remote-Client provided an empty client certificate to connect to the ZTNA access proxy.

C. Remote-Client provided an invalid certificate to connect to the ZTNA access proxy.

D. Remote-Client failed the client certificate authentication.