FCP_FCT_AD-7.2 Free Practice Test

When site categories are disabled in FortiClient web filter, which feature can be used to
protect the endpoint from malicious web access?

1. A. Real-time protection list
2. B. Block malicious websites on antivirus
3. C. FortiSandbox URL list
4. D. Web exclusion list

Correct Answer: D
✑ Web Filter Functionality:
✑ Alternative Protection Features:
✑ Conclusion:
References:
✑ FortiClient web filter configuration and features from the study guides.

Which statement about FortiClient enterprise management server is true?

1. A. It provides centralized management of FortiGate devices.
2. B. lt provides centralized management of multiple endpoints running FortiClient software.
3. C. It provides centralized management of FortiClient Android endpoints only.
4. D. It provides centralized management of Chromebooks running real-time protection

Correct Answer: B
FortiClient EMS is designed to provide centralized management and control of multiple endpoints running FortiClient software. It serves as a central management server that allows administrators to efficiently manage and configure a large number of FortiClient installations across the network.

Which statement about FortiClient comprehensive endpoint protection is true?

1. A. It helps to safeguard systems from email spam
2. B. It helps to safeguard systems from data loss.
3. C. It helps to safeguard systems from DDoS.
4. D. lt helps to safeguard systems from advanced security threats, such as malware.

Correct Answer: D
FortiClient provides comprehensive endpoint protection for your Windows- based, Mac-based, and Linuxbased desktops, laptops, file servers, and mobile devices such as iOS and Android. It helps you to safeguard your systems with advanced security technologies, all of which you can manage from a single management console.

Which two statements about ZTNA destinations are true? (Choose two.)

1. A. FottiClient ZTNA destinations use an existing VPN tunnel to create a secure connection.
2. B. FortiClient ZTNA destinations provides access through TCP forwarding.
3. C. FortiClient ZTNA destinations do not support a wildcard FQDN.
4. D. FortiClient ZTNA destination encryption is disabled by default.
5. E. FortiCIient ZTNA destination authentication is enabled by default.

Correct Answer: CD

Refer to the exhibits.


Which shows the configuration of endpoint policies.
Based on the configuration, what will happen when someone logs in with the user account student on an endpoint in the trainingAD domain?

1. A. FortiClient EMS will assign the Sales policy
2. B. FortiClient EMS will assign the Training policy
3. C. FortiClient EMS will assign the Default policy
4. D. FortiClient EMS will assign the Training policy for on-fabric endpoints and the Sales policy for the off-fabric endpoint

Correct Answer: B
Based on the configuration shown in the exhibits:
✑ There are three endpoint policies configured: Training, Sales, and Default.
✑ The "Training" policy is assigned to the "trainingAD.training.lab" group.
✑ The "Sales" policy is assigned to "All Groups" and "trainingAD.training.lab/student."
✑ The "Default" policy has no specific groups assigned.
When someone logs in with the user account "student" on an endpoint in the "trainingAD" domain:
✑ The "Training" policy is specifically assigned to the "trainingAD.training.lab" group.
✑ The "Sales" policy includes "trainingAD.training.lab/student" but not the general "trainingAD.training.lab" group.
✑ The system will prioritize the most specific match for the group.
Therefore, FortiClient EMS will assign the "Training" policy to the "student" account logging into the "trainingAD" domain as it matches the group "trainingAD.training.lab" directly. References
✑ FortiClient EMS 7.2 Study Guide, Endpoint Policy Configuration Section
✑ FortiClient EMS Documentation on Group Policy Assignment and Matching