Oct-2024 Fortinet FCP_FCT_AD-7.2 Actual Questions and Braindumps [Q11-Q34] – IT Certification Exam Questions & Answers

Rate this post

Oct-2024 Fortinet FCP_FCT_AD-7.2 Actual Questions and Braindumps

FCP_FCT_AD-7.2 Dumps To Pass Fortinet Exam in 24 Hours – It-Tests

Q11. What does FortiClient do as a fabric agent? (Choose two.)

Provides IOC verdicts

Creates dynamic policies

Provides application inventory

Automates Responses

Q12. An administrator has a requirement to add user authentication to the ZTNA access for remote or off-fabric users Which FortiGate feature is required m addition to ZTNA?

FortiGate FSSO

FortiGate certificates

C. FortiGate explicit proxy

FortiGate endpoint control

Q13. Which three types of antivirus scans are available on FortiClient? (Choose three )

Proxy scan

Full scan

Custom scan

Flow scan

Quick scan

Q14. ZTNA Network Topology

Refer to the exhibits, which show a network topology diagram of ZTNA proxy access and the ZTNA rule configuration.
An administrator runs the diagnose endpoint record list CLI command on FortiGate to check Remote-Client endpoint information, however Remote-Client is not showing up in the endpoint record list.
What is the cause of this issue?

Remote-Client has not initiated a connection to the ZTNA access proxy.

Remote-Client provided an empty client certificate to connect to the ZTNA access proxy.

Remote-Client provided an invalid certificate to connect to the ZTNA access proxy.

Remote-Client failed the client certificate authentication.

Q15. Refer to the exhibits.

Based on the FortiGate Security Fabric settings shown in the exhibits, what must an administrator do on the EMS server to successfully quarantine an endpoint. when it is detected as a compromised host (loC)?

The administrator must enable remote HTTPS access to EMS.

The administrator must enable FQDN on EMS.

The administrator must authorize FortiGate on FortiAnalyzer.

The administrator must enable SSH access to EMS.

Q16. Refer to the exhibit.

Based on the settings shown in the exhibit what action will FortiClient take when it detects that a user is trying to download an infected file?

Blocks the infected files as it is downloading

Quarantines the infected files and logs all access attempts

Sends the infected file to FortiGuard for analysis

Allows the infected file to download without scan

Q17. Refer to the exhibits.

Which shows the configuration of endpoint policies.
Based on the configuration, what will happen when someone logs in with the user account student on an endpoint in the trainingAD domain?

FortiClient EMS will assign the Sales policy

FortiClient EMS will assign the Training policy

FortiClient EMS will assign the Default policy

FortiClient EMS will assign the Training policy for on-fabric endpoints and the Sales policy for the off- fabric endpoint

Q18. Exhibit.

Based on the FortiClient logs shown in the exhibit, which endpoint profile policy is currently applied lo the ForliClient endpoint from the EMS server?

Fortinet-Training

Default configuration policy c

Compliance rules default

Default

Q19. An administrator installs FortiClient on Windows Server.
What is the default behavior of real-time protection control?

Real-time protection must update AV signature database

Real-time protection sends malicious files to FortiSandbox when the file is not detected locally

Real-time protection is disabled

Real-time protection must update the signature database from FortiSandbox

Q20. Refer to the exhibit.

Based on the FortiClient tog details shown in the exhibit, which two statements ace true? (Choose two.)

The filename Is Unconfirmed 899290.crdovnload.

The file status is Quarantined

The filename is sent to FortiSandbox for further inspection.

The file location is ??D:Users.

Q21. What action does FortiClient anti-exploit detection take when it detects exploits?

Deletes the compromised application process

Patches the compromised application process

Blocks memory allocation to the compromised application process

Terminates the compromised application process

Q22. Which two third-party tools can an administrator use to deploy FortiClient? (Choose two.)

Microsoft Windows Installer

B. Microsoft SCCM

C. Microsoft Active Directory GPO

QR code generator

Q23. Which two third-party tools can an administrator use to deploy FortiClient? (Choose two.)

Microsoft Windows Installer

Microsoft SCCM

Microsoft Active Directory GPO

QR code generator

Q24. Refer to the exhibit.

Based on the settings shown in the exhibit, which two actions must the administrator take to make the endpoint compliant? (Choose two.)

Enable the web filter profile.

Run Calculator application on the endpoint.

Integrate FortiSandbox tor infected file analysis

Patch applications that have vulnerability rated as high or above.

Q25. Why does FortiGate need the root CA certificate of FortiCient EMS?

To revoke FortiClient client certificates

To sign FortiClient CSR requests

To update FortiClient client certificates

To trust certificates issued by FortiClient EMS

Q26. Which component or device shares ZTNA tag information through Security Fabric integration?

FortiClient EMS

FortiGate

FortiGate Access Proxy

FortiClient

Q27. Refer to the exhibit.

An administrator has restored the modified XML configuration file to FortiClient and sees the error shown in the exhibit.
Based on the XML settings shown in the exhibit, what must the administrator do to resolve the issue with the XML configuration file?

The administrator must resolve the XML syntax error.

The administrator must use a password to decrypt the file

The administrator must change the file size

The administrator must save the file as FortiClient-config conf.

Q28. An administrator is required to maintain a software vulnerability on the endpoints, without showing the feature on the FortiClient. What must the administrator do to achieve this requirement?

Select the vulnerability scan feature in the deployment package, but disable thefeatureon the endpoint profile

Disable select the vulnerability scan feature in the deployment package

Click the hide icon on the vulnerability scan profile assigned to endpoint

Use the default endpoint profile

Q29. A FortiClient EMS administrator has enabled the compliance rule forthe sales department Which Fortinet device will enforce compliance with dynamic access control?

FortiClient

FortiClient EMS

FortiGate

FortiAnalyzer

Q30. Refer to the exhibit.

Based on The settings shown in The exhibit, which statement about FortiClient behaviour is Hue?

FortiClient scans infected files when the user copies files to the Resources folder.

FortiClient quarantines infected ties and reviews later, after scanning them.

FortiClient copies infected files to the Resources folder without scanning them.

FortiClient blocks and deletes infected files after scanning them.

Q31. Which three types of antivirus scans are available on FortiClient? (Choose three )

Proxy scan

Full scan

Custom scan

Flow scan

Quick scan

Q32. Which security fabric component sends a notification io quarantine an endpoint after IOC detection “n the automation process?

FortiClient EMS

FortiGate

FortiAnalyzer

FortiClient

Q33. What is the function of the quick scan option on FortiClient?

It scans programs and drivers that are currently running, for threats

It performs a full system scan including all files, executable files. DLLs, and drivers for throats.

It allows users to select a specific file folder on their local hard disk drive (HDD), to scan for threats.

It scans executable files. DLLs, and drivers that are currently running, for threats.

Q34. An administrator has a requirement to add user authentication to the ZTNA access for remote or off-fabric users Which FortiGate feature is required m addition to ZTNA?

FortiGate FSSO

FortiGate certificates

FortiGate explicit proxy

FortiGate endpoint control