Free Fortinet NSE7_ZTA-7.2 Exam Dumps Questions & Answers

Exhibit.

An administrator has to provide on-fabric clients with access to FortiAnalyzer using ZTNA tags Which two conditions must be met to achieve this task? (Choose two.)

• A.  The on-fabric client should have FortiGate as its default gateway
• B.  The IP/MAC based firewall policy must be configured on FortiGate
• C.  The ZTNA server must be configured on FortiGate
• D.  The ZTNArule must be configured on FortiClient

Exhibit.

Which two statements are true about the hr endpoint? (Choose two.)

• A.  The endpoint will be moved to the remediation VLAN
• B.  The endpoint is marked as a rogue device
• C.  The endpoint has failed the compliance scan
• D.  The endpoint application inventory could not be retrieved

What are the three core principles of ZTA? (Choose three.)

• A.  Certify
• B.  Assume breach
• C.  Minimal access
• D.  Verity
• E.  Be compliant

An administrator is trying to create a separate web tittering profile for off-fabric and on-fabric clients and push it to managed FortiClient devices Where can you enable this feature on FortiClient EMS?

• A.  On-fabric rule sets
• B.  System settings
• C.  Endpoint policy
• D.  ZTNA connection rules

exhibit.

User student is not able to log in to SSL VPN
Given the output showing a real-time debug: which statement describes the login failure?

• A.  Unable to verify chain of trust for the peer certificate
• B.  student is not part of the usergroup SSL_VPN_Users.
• C.  CN does not match the user peer configuration
• D.  Client certificate has expired