Simplifying Remote Access:

The administrator wants to simplify remote access without asking users to provide user credentials.

Evaluating Access Control Methods:

ZTNA full mode can provide seamless access by leveraging device identity and posture, eliminating the need for user credentials for each access request.

Other methods like SSL VPN and L2TP typically require user credentials.

Conclusion:

The correct access control method that provides this solution is ZTNA full mode.

References:

ZTNA section in the FortiGate Infrastructure 7.2 Study Guide​​.

Understanding FortiSandbox Integration:

In a FortiSandbox integration, various remediation options are available for handling suspicious files.

Evaluating Remediation Options:

The remediation option for alerting and notifying without blocking access or waiting for results is essential to understand.

Conclusion:

The correct action for the remediation option in this context is to alert and notify only.

References:

FortiSandbox integration documentation from the study guides.

Observation of Compliance Profile:

The compliance profile shown in the exhibit includes rules for vulnerability severity level and running process (Calculator.exe).

Evaluating Actions for Compliance:

To make the endpoint compliant, the administrator needs to ensure that the vulnerability severity level is medium or higher is patched (D).

Additionally, the Calculator.exe application must be running on the endpoint (B).

Eliminating Incorrect Options:

Enabling the web filter profile (A) is not related to the compliance rules shown.

Integrating FortiSandbox (C) is not a requirement in the given compliance profile.

Conclusion:

The correct actions are to run the Calculator application on the endpoint (B) and patch applications with vulnerabilities rated as high or above (D).

References:

FortiClient EMS compliance profile configuration documentation from the study guides.