Online Access Free NSE7_ZTA-7.2 Practice Test

Which two statements are true regarding certificate-based authentication for ZTNA deployment? (Choose two.)

• A.FortiGate signs the client certificate submitted by FortiClient.
• B.Client certificate configuration is a mandatory component for ZTNA
• C.Certificate actions can be configured only on the FortiGate CLI
• D.The default action for empty certificates is block

An administrator wants to prevent direct host-to-host communication at layer 2 and use only FortiGate to inspect all the VLAN traffic What three things must the administrator configure on FortiGate to allow traffic between the hosts? (Choose three.)

• A.Block intra-VLAN traffic in the VLAN interface settings
• B.Configure a firewall policy to allow the desired traffic between hosts
• C.Configure proxy ARP to allow traffic
• D.Add the VLAN interface to a software switch
• E.Configure static routes to allow subnets

Which statement is true regarding a FortiClient quarantine using FortiAnalyzer playbooks?

• A.FortiAnalyzer sends an API to FortiClient EMS to quarantine the endpoint
• B.FortiGate sends a notification to FortiClient EMS to quarantine the endpoint
• C.FortiClient sends logs to FortiAnalyzer
• D.FortiAnalyzer discovers malicious activity in the logs and notifies FortiGate

What happens when FortiClient EMS is configured as an MDM connector on FortiNAC?

• A.FortiClient EMS verifies with FortiNAC that the device is registered
• B.FortiNAC sends the hostdata to FortiClient EMS to update its host database
• C.FortiNAC polls FortiClient EMS periodically to update already registered hosts in FortiNAC
• D.FortiNAC checks for device vulnerabilities and compliance with FortiClient

Which statement is true about disabled hosts on FortiNAC?

• A.They are quarantined and placed in the remediation VLAN
• B.They are placed in the authentication VLAN to reauthenticate
• C.They are placed in the dead end VLAN
• D.They are marked as unregistered rogue devices