Fortinet NSE7_ZTA-7.2 Quiz 1 Topic 1 Questions 1-5

Question: 1

Exhibit.

q1_NSE7_ZTA-7.2

Which two statements are true about the hr endpoint? (Choose two.)

AThe endpoint application inventory could not be retrieved

BThe endpoint is marked as a rogue device

CThe endpoint has failed the compliance scan

DThe endpoint will be moved to the remediation VLAN

Show Answer

Question: 2

Exhibit.

q2_NSE7_ZTA-7.2

Which port group membership should you enable on FortiNAC to isolate rogue hosts'?

AForced Authentication

BForced Registration

CForced Remediation

DReset Forced Registration

Show Answer

Question: 3

An administrator has to configure LDAP authentication tor ZTNA HTTPS access proxy Which authentication scheme can the administrator apply1?

ABasic

BForm-based

CDigest

DNTLM

Show Answer

Question: 4

Which factor is a prerequisite on FortiNAC to add a Layer 3 router to its inventory?

AAllow HTTPS access from the router to the FortiNAC ethO IP address

BAllow FTP access to the FortiNAC database from the router

CThe router responding to ping requests from the FortiNAC eth1 IP address

DSNMP or CLI access to the router to carry out remote tasks

Show Answer

Question: 5

Which two statements are true regarding certificate-based authentication for ZTNA deployment? (Choose two.)

AFortiGate signs the client certificate submitted by FortiClient.

BThe default action for empty certificates is block

CCertificate actions can be configured only on the FortiGate CLI

DClient certificate configuration is a mandatory component for ZTNA

Show Answer

Fortinet NSE7_ZTA-7.2 Quiz:1 Topic:1 Questions:1-5