Q21. Refer to the exhibit.

Based on the Security Fabric automation settings, what action will be taken on compromised endpoints?

Q22. Which two statements are true about the ZTNA rule? (Choose two. )

Q23. Which two benefits are benefits of using multi-tenancy mode on FortiClient EMS? (Choose two.)

Q24. Refer to the exhibit.

Based on the FortiClient log details shown in the exhibit, which two statements are true? (Choose two.)

Q25. When site categories are disabled in FortiClient webfilter and antivirus (malicious websites), which feature can be used to protect the endpoint from malicious web access?

Q26. Refer to the exhibit.

Based on the settings shown in the exhibit what action will FortiClient take when it detects that a user is trying to download an infected file?

Q27. A FortiClient EMS administrator has enabled the compliance rule for the sales department. Which Fortinet device will enforce compliance with dynamic access control?

Q28. Refer to the exhibit.

Which shows FortiClient EMS deployment profiles.
When an administrator creates a deployment profile on FortiClient EMS, which statement about the deployment profile is true?

Q29. Which three features does FortiClient endpoint security include? (Choose three.)

Q30. In a FortiSandbox integration, what does the remediation option do?

Q31. Refer to the exhibits.


Which shows the configuration of endpoint policies.
Based on the configuration, what will happen when someone logs in with the user account student on an endpoint in the trainingAD domain?

Q32. Which security fabric component sends a notification to quarantine an endpoint after IOC detection in the automation process?

Q33. Refer to the exhibit.

Based on the FortiClient logs shown in the exhibit which application is blocked by the application firewall?

Q34. Refer to the exhibit.

Based on the logs shown in the exhibit, why did FortiClient EMS fail to install FortiClient on the endpoint?

Q35. Which three types of antivirus scans are available on FortiClient? (Choose three )