FCP_FCT_AD-7.2 Exam Dumps : FCP-FortiClient EMS 7.2 Administrator

Simplifying Remote Access:

The administrator wants to simplify remote access without asking users to provide user credentials.

Evaluating Access Control Methods:

ZTNA full mode can provide seamless access by leveraging device identity and posture, eliminating the need for user credentials for each access request.

Other methods like SSL VPN and L2TP typically require user credentials.

Conclusion:

The correct access control method that provides this solution is ZTNA full mode.

References:

ZTNA section in the FortiGate Infrastructure 7.2 Study Guide​​.

Based on the Security Fabric automation settings shown in the exhibit:

The automation stitch is configured with a trigger for a "Compromised Host."

The action specified for this trigger is "Quarantine FortiClient via EMS."

This indicates that when an endpoint is detected as compromised, FortiClient EMS will quarantine the endpoint as part of the automation process.

Therefore, the action taken on compromised endpoints will be to quarantine them through EMS.

References

FortiGate Security 7.2 Study Guide, Automation Stitches and Actions Section

Fortinet Documentation on Configuring Automation Stitches and Quarantine Actions

Block Malicious Website has nothing to do with infected files. Since Realtime Protection is OFF, it will be allowed without being scanned.

Based on the settings shown in the exhibit:

Realtime Protection:OFF

Dynamic Threat Detection:OFF

Block malicious websites:ON

Threats Detected:75

The "Realtime Protection" setting is crucial for preventing infected files from being downloaded and executed. Since "Realtime Protection" is OFF, FortiClient will not actively scan files being downloaded. The setting "Block malicious websites" is intended to prevent access to known malicious websites but does not scan files for infections.

Therefore, when a user tries to download an infected file, FortiClient will allow the file to download without scanning it due to the Realtime Protection being OFF.

References

FortiClient EMS 7.2 Study Guide, Antivirus Protection Section

Fortinet Documentation on FortiClient Real-time Protection Settings