NSE 6 - FortiClient EMS 7.4 Administrator Practice Questions & Answers • ExamPrepare

29 questions in this view

Page 1 of 5

Question 1

Refer to the exhibit.

An administrator is not able to add FortiClient EMS to the Security Fabric.

What is causing this problem?

Output of fcnacd debugs

FortiGate does not trust the FortiClient EMS CA certificate.
FortiGate is not able to reach the IP address or FQDN of the FortiClient EMS server.
FortiGate is not able to reach FortiClient EMS on telemetry port 8013.
FortiGate is not able to verify FortiClient EMS serial number.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

A FortiClient EMS administrator is implementing additional security on FortiClient for compliance checks.

Which tags can the administrator configure to detect endpoints based on vulnerability severity levels?

Classification tags
Outbreak alert tags
Fabric tags
Security posture tags

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

What can you configure on FortiClient EMS as an additional layer of security for FortiClient registration?

Security posture tags
User verification
Device identification
Application inventory

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

Refer to the exhibit.

Why was the endpoint denied access to the zero trust network access (ZTNA) server?

WAD Debugs Snippet

The user authentication failed for the remote user.
The security posture tags matched a deny policy.
The client certificate could not be verified by FortiGate.
The traffic did not match any proxy policy.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

An administrator has configured a Fabric solution including FortiGate, FortiClient EMS, FortiClient, and FortiAnalyzer. FortiAnalyzer does not show any endpoint data.

What must the administrator configure to get the endpoint logs on FortiAnalyzer?

The administrator must enable the FortiClient EMS serial number on FortiAnalyzer to establish trust.
The administrator must enable FortiAnalyzer logging in the system settings endpoint profile.
The administrator must enable FortiAnalyzer logging on the FortiClient console.
The administrator must enable FortiAnalyzer logging in the FortiClient EMS log setting.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

A security architect has designed a high availability (HA) solution with three FortiClient EMS nodes across two datacenters connected throughsite-to-site IPsec VPN with 1GB of dedicated bandwidth.

How can the architect ensure a seamless failover between FortiClient EMS nodes?

Include a remote SQL server in the design.
License each FortiClient EMS server separately.
Provide support for active-active HA mode.
Provide layer 2 connectivity for the FortiClient EMS servers.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.