Is this exam completely free?

ExamCademy offers a free preview for every exam, covering around 20% of the total questions. Full access to all questions is available for free by signing up for an account. Optional supporters unlock AstroTutor (AI tutor) and advanced study modes.

Can I practice IT certification exams from Microsoft, AWS, or CompTIA?

Yes! ExamCademy supports a wide range of IT certification exams including Microsoft Azure, AWS Cloud Practitioner, and CompTIA A+ and Security+.

How accurate are the mock exams?

Our practice questions are community-created and moderator-reviewed to align with realistic exam objectives, style, and difficulty.

Home Exams Contribute Leaderboard

Home Exams Contribute Leaderboard Login

Loading questions...

info@examcademy.com

Features

Contribute Questions Leaderboard

Community

Discord

YouTube

Legal

ExamCademy is not affiliated with or endorsed by any certification providers. All trademarks are the property of their respective owners.

NSE7-ZTA-7-2 by Fortinet - Page 1 | ExamCademy | ExamCademy

Exams
Fortinet
NSE7-ZTA-7-2

NSE7-ZTA-7-2Preview

By Fortinet

Updated

25Q per page

Mode Selection

Sort:

Question 1

Question 2

Question 3

Question 4

Question 5

Want a break from the ads?

Become a Supporter and enjoy a completely ad-free experience, plus unlock Learn Mode, Exam Mode, AstroTutor AI, and more.

Go ad-free

Question 6

That's the end of the Preview

Create a free account to unlock all questions for this exam.

Page 1 of 2 • Questions 1-25 of 30

1 2

→

Know a question that should be here? Contribute to this exam

An administrator is trying to create a separate web filtering profile for off-fabric and on-fabric clients and push it to managed FortiClient devices.
Where can you enable this feature on FortiClient EMS?

A Endpoint policy
B ZTNA connection rules
C System settings
D On-fabric rule sets

FortiNAC has alarm mappings configured for MDM compliance failure, and FortiClient EMS is added as an MDM connector.
When an endpoint is quarantined by FortiClient EMS, what action does FortiNAC perform?

A The host is isolated in the registration VLAN.
B The host is marked at risk.
C The host is forced to authenticate again.
D The host is disabled.

Refer to the exhibit.

Question Image

Which port group membership should you enable on FortiNAC to isolate rogue hosts?

A Forced Authentication
B Forced Registration
C Forced Remediation
D Reset Forced Registration

What are the three core principles of ZTA? (Choose three.)

A Verify
B Be compliant
C Certify
D Minimal access
E Assume breach

With the increase in IoT devices, which two challenges do enterprises face? (Choose two.)

A Bandwidth consumption due to added overhead of IoT
B Maintaining a high performance network
C Unpatched vulnerabilities in IoT devices
D Achieving full network visibility

Refer to the exhibit.

Question Image

An administrator has to provide on-fabric clients with access to FortiAnalyzer using ZTNA tags.
Which two conditions must be met to achieve this task? (Choose two.)

A The on-fabric client should have FortiGate as its default gateway.
B The ZTNA server must be configured on FortiGate.
C The ZTNA rule must be configured on FortiClient.
D The IP/MAC based firewall policy must be configured on FortiGate.