NSE5_FCT-6.2 Online Practice Questions and Answers

An administrator deploys a FortiClient installation through the Microsoft AD group policy After installation is

complete all the custom configuration is missing.

What could have caused this problem?

A. The FortiClient exe file is included in the distribution package

B. The FortiClient MST file is missing from the distribution package

C. FortiClient does not have permission to access the distribution package.

D. The FortiClient package is not assigned to the group

Refer to the exhibits.

Based on the FortiGate Security Fabric settings shown in the exhibits, what must an administrator do on the EMS server to successfully quarantine an endpoint. when it is detected as a compromised host (loC)?

A. The administrator must enable remote HTTPS access to EMS.

B. The administrator must enable FQDN on EMS.

C. The administrator must authorize FortiGate on FortiAnalyzer.

D. The administrator must enable SSH access to EMS.

A new chrome book is connected in a schools network

Which component can the EMS administrator use to manage the FortiClient web filter extension installed on the Google Chromebook endpoint?

A. FortiClient customer URL list

B. FortiClient web filter extension

C. FortiClient EMS

D. FortiClient site categories

Which two VPN types can a FortiClient endpoint user inmate from the Windows command prompt? (Choose two)

A. L2TP

B. PPTP

C. IPSec

D. SSL VPN

What does FortiClient do as a fabric agent? (Choose two )

A. Provides application inventory

B. Provides IOC verdicts

C. Automates Responses

D. Creates dynamic policies

What is the function of the quick scan option on FortiClient?

A. It performs a full system scan including all files, executable files, DLLs, and drivers for threats.

B. It scans executable files. DLLs, and drivers that are currently running, for threats.

C. It allows users to select a specific file folder on your local hard disk drive (HDD), to scan for threats

D. It scans programs and drivers that are currently running for threats

Refer to the exhibit.

Based on the settings shown in the exhibit which statement about FortiClient behavior is true?

A. FortiClient quarantines infected files and reviews later, after scanning them.

B. FortiClient blocks and deletes infected files after scanning them.

C. FortiClient scans infected files when the user copies files to the Resources folder

D. FortiClient copies infected files to the Resources folder without scanning them.

Refer to the exhibit.

Based on the FortiClient logs shown in the exhibit which application is blocked by the application firewall?

A. Twitter

B. Facebook

C. Internet Explorer

D. Firefox

An administrator installs FortiClient on Windows Server. What is the default behavior of real-time protection control?

A. Real-time protection must update AV signature database

B. Real-time protection sends malicious files to FortiSandbox when the file is not detected locally

C. Real-time protection is disabled

D. Real-time protection must update the signature database from FortiSandbox

Which network component sends a notification after identifying a connected endpoint in the quarantine automation process?

A. FortiGate

B. FortiClient

C. FortiClient EMS

D. FortiAnalyzer