Practice NSE7_ZTA-7.2 Exam Online

Question 1

Which three statements are true about a persistent agent? (Choose three.)

A : Agent is downloaded and run from captive portal

B : Supports advanced custom scans and software inventory.

C : Can apply supplicant configuration to a host

D : Deployed by a login/logout script and is not installed on the endpoint

E : Can be used for automatic registration and authentication

Answer: B,C,E

Question 2

An administrator wants to prevent direct host-to-host communication at layer 2 and use only FortiGate to inspect all the VLAN traffic What three things must the administrator configure on FortiGate to allow traffic between the hosts? (Choose three.)

A : Configure proxy ARP to allow traffic

B : Block intra-VLAN traffic in the VLAN interface settings

C : Add the VLAN interface to a software switch

D : Configure static routes to allow subnets

E : Configure a firewall policy to allow the desired traffic between hosts

Answer: B,D,E

Question 3

An administrator is trying to create a separate web tittering profile for off-fabric and on-fabric clients and push it to managed FortiClient devices Where can you enable this feature on FortiClient EMS?

A : Endpoint policy

B : ZTNA connection rules

C : System settings

D : On-fabric rule sets

Answer: A

Name:	Fortinet NSE 7 - Zero Trust Access 7.2
Exam Code:	NSE7_ZTA-7.2
Certification:	NSE 7 Network Security Architect
Vendor:	Fortinet
Total Questions:	30
Last Updated:	Apr 22, 2024

Fortinet NSE7_ZTA-7.2