NSE7-ZTA-7-2 Practice Exam — 49 Free Fortinet Questions

Join Us Among the Stars

Sign Up & unlock 100% of Exam Questions

Log in / Sign up

No Strings Attached!

49Practice Questions

3Study Modes

Free

TopicSort

Question 1

Endpoint compliance

An administrator is trying to create a separate web filtering profile for off-fabric and on-fabric clients and push it to managed FortiClient devices.
Where can you enable this feature on FortiClient EMS?

A Endpoint policy
B ZTNA connection rules
C System settings
D On-fabric rule sets

Question 2

Endpoint compliance

Question 3

Network access control

Question 4

Zero trust access (ZTA) methodology and components

Question 5

Zero trust network access (ZTNA) deployment

Question 6

Endpoint compliance

Question 7

Zero trust access (ZTA) methodology and components

Question 8

Network access control

Question 9

Endpoint compliance

Question 10

Network access control

Question 11

Endpoint compliance

Question 12

Network access control

Question 13

Zero trust network access (ZTNA) deployment

Question 14

Endpoint compliance

Question 15

Endpoint compliance

Question 16

Zero trust network access (ZTNA) deployment

Question 17

Incident response

Question 18

Endpoint compliance

Question 19

Network access control

Question 20

Network access control

That's the end of the Preview

This exam has 49 community-verified practice questions. Create a free account to access all questions, comments, and explanations.

Topics covered:

Zero trust access (ZTA) methodology and componentsNetwork access controlZero trust network access (ZTNA) deploymentEndpoint complianceIncident response

Log In / Sign Up

Page 1 of 2 • Questions 1-25 of 49

1 2

→

Know a question that should be here? Contribute to this exam

FortiNAC has alarm mappings configured for MDM compliance failure, and FortiClient EMS is added as an MDM connector.
When an endpoint is quarantined by FortiClient EMS, what action does FortiNAC perform?

A The host is isolated in the registration VLAN.
B The host is marked at risk.
C The host is forced to authenticate again.
D The host is disabled.

Refer to the exhibit.

Question Image

Which port group membership should you enable on FortiNAC to isolate rogue hosts?

A Forced Authentication
B Forced Registration
C Forced Remediation
D Reset Forced Registration

What are the three core principles of ZTA? (Choose three.)

A Verify
B Be compliant
C Certify
D Minimal access
E Assume breach

Refer to the exhibit.

Question Image

An administrator has to provide on-fabric clients with access to FortiAnalyzer using ZTNA tags.
Which two conditions must be met to achieve this task? (Choose two.)

A The on-fabric client should have FortiGate as its default gateway.
B The ZTNA server must be configured on FortiGate.
C The ZTNA rule must be configured on FortiClient.
D The IP/MAC based firewall policy must be configured on FortiGate.

Question 6

Endpoint compliance

Question 7

Zero trust access (ZTA) methodology and components

Question 8

Network access control

Question 9

Endpoint compliance

Question 10

Network access control

Question 11

Endpoint compliance

Question 12

Network access control

Question 13

Zero trust network access (ZTNA) deployment

Question 14

Endpoint compliance

Question 15

Endpoint compliance

Question 16

Zero trust network access (ZTNA) deployment

Question 17

Incident response

Question 18

Endpoint compliance

Question 19

Network access control

Question 20

Network access control

With the increase in IoT devices, which two challenges do enterprises face? (Choose two.)

A Bandwidth consumption due to added overhead of IoT
B Maintaining a high performance network
C Unpatched vulnerabilities in IoT devices
D Achieving full network visibility

What are two functions of NGFW in a ZTA deployment? (Choose two.)

A Acts as segmentation gateway
B Endpoint vulnerability management
C Device discovery and profiling
D Packet Inspection

Which two types of configuration can you associate with a user/host profile on FortiNAC? (Choose two.)

A Service Connectors
B Network Access
C Inventory
D Endpoint compliance

Which statement is true regarding a FortiClient quarantine using FortiAnalyzer playbooks?

A FortiGate sends a notification to FortiClient EMS to quarantine the endpoint.
B FortiAnalyzer discovers malicious activity in the logs and notifies FortiGate.
C FortiAnalyzer sends an API to FortiClient EMS to quarantine the endpoint.
D FortiClient sends logs to FortiAnalyzer.

Which statement is true about disabled hosts on FortiNAC?

A They are quarantined and placed in the remediation VLAN.
B They are placed in the authentication VLAN to reauthenticate.
C They are marked as unregistered rogue devices.
D They are placed in the dead end VLAN.

Refer to exhibit.

Question Image

Which statement is true about the hr endpoint?

A The endpoint is a rogue device.
B The endpoint is disabled.
C The endpoint is unauthenticated.
D The endpoint has been marked at risk.

Which factor is a prerequisite on FortiNAC to add a Layer 3 router to its inventory?

A Allow HTTPS access from the router to the FortiNAC eth0 IP address.
B Allow FTP access to the FortiNAC database from the router.
C The router responding to ping requests from the FortiNAC eth1 IP address.
D SNMP or CLI access to the router to carry out remote tasks.

Which statement is true about FortiClient EMS in a ZTNA deployment?

A Uses endpoint information to grant or deny access to the network.
B Provides network and user identity authentication services.
C Generates and installs client certificates on managed endpoints.
D Acts as ZTNA access proxy for managed endpoints.

What happens when FortiClient EMS is configured as an MDM connector on FortiNAC?

A FortiNAC sends the host data to FortiClient EMS to update its host database.
B FortiClient EMS verifies with FortiNAC that the device is registered.
C FortiNAC polls FortiClient EMS periodically to update already registered hosts in FortiNAC.
D FortiNAC checks for device vulnerabilities and compliance with FortiClient.

Refer to the exhibits.

Question Image

Which statement is true about the configuration shown in the exhibit?

A The domain that FortiClient is connecting to should match the domain to which the certificate is issued.
B If the FortiClient EMS server certificate is invalid, FortiClient connects silently.
C The connection from FortiClient to FortiClient EMS uses TCP and TLS 1.2.
D default_ZTNARoot CA signs the FortiClient certificate for the SSL connectivity to FortiClient EMS.

An administrator has to configure LDAP authentication for ZTNA HTTPS access proxy.
Which authentication scheme can the administrator apply?

A Basic
B Form-based
C Digest
D NTLM

Refer to the exhibit.

Question Image

Which statement is true about the FortiAnalyzer playbook configuration shown in the exhibit?

A The playbook is run on a configured schedule.
B The playbook is run when an incident is created that matches the filters.
C The playbook is run when an event is created that matches the filters.
D The playbook is manually started by an administrator.

Which method is used to install passive agent on an endpoint?

A Deployed by using a login/logout script
B Agent is downloaded from Playstore
C Agent is downloaded and run from captive portal
D Installed by user or deployment tools

An administrator wants to prevent direct host-to-host communication at layer 2 and use only FortiGate to inspect all the VLAN traffic.
What three things must the administrator configure on FortiGate to allow traffic between the hosts? (Choose three.)

A Block intra-VLAN traffic in the VLAN interface settings.
B Add the VLAN interface to a software switch.
C Configure static routes to allow subnets.
D Configure a firewall policy to allow the desired traffic between hosts.
E Configure proxy ARP to allow traffic.

Which one of the supported communication methods does FortiNAC use for initial device identification during discovery?

A LLDP
B SNMP
C API
D SSH

Join Us Among the Stars

NSE7-ZTA-7-2Preview

About the NSE7-ZTA-7-2 Exam

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

That's the end of the Preview

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

Join Us Among the Stars

NSE7-ZTA-7-2Preview

About the NSE7-ZTA-7-2 Exam

Mode Selection

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20

That's the end of the Preview

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Question 19

Question 20