100% Free Fortinet NSE7_ZTA-7.2 Practice Test Questions

Question 1

Which three statements are true about a persistent agent? (Choose three.)

A : Agent is downloaded and run from captive portal

B : Supports advanced custom scans and software inventory.

C : Can apply supplicant configuration to a host

D : Deployed by a login/logout script and is not installed on the endpoint

E : Can be used for automatic registration and authentication

Answer: B,C,E

Question 2

An administrator wants to prevent direct host-to-host communication at layer 2 and use only FortiGate to inspect all the VLAN traffic What three things must the administrator configure on FortiGate to allow traffic between the hosts? (Choose three.)

A : Configure proxy ARP to allow traffic

B : Block intra-VLAN traffic in the VLAN interface settings

C : Add the VLAN interface to a software switch

D : Configure static routes to allow subnets

E : Configure a firewall policy to allow the desired traffic between hosts

Answer: B,D,E

Question 3

An administrator wants to prevent direct host-to-host communication at layer 2 and use only FortiGate to inspect all the VLAN traffic What three things must the administrator configure on FortiGate to allow traffic between the hosts? (Choose three.)

A : Configure proxy ARP to allow traffic

B : Block intra-VLAN traffic in the VLAN interface settings

C : Add the VLAN interface to a software switch

D : Configure static routes to allow subnets

E : Configure a firewall policy to allow the desired traffic between hosts

Answer: B,D,E

Question 4

An administrator is trying to create a separate web tittering profile for off-fabric and on-fabric clients and push it to managed FortiClient devices Where can you enable this feature on FortiClient EMS?

A : Endpoint policy

B : ZTNA connection rules

C : System settings

D : On-fabric rule sets

Answer: A

Question 5