FCP—FortiClient EMS 7.2 Administrator (FCP_FCT_AD-7.2) - Fortinet Exam Questions

In a ForliSandbox integration, what does the remediation option do?

Refer to the exhibits.



Security Fabric Settings © FortiGate Telemetry Security Fabric role Serve as Fabric Root Join Existing Fabric Fabric name Fabric Topology @ FGVM010000052731 (Fabric Root) Allow other FortiGates to join O • port3 + Pre-authorized FortiGates None & Edit SAML Single Sign-On e Management IP/FQDN ® Use WAN IP Specify Management Port Use Admin Port Specify FortiAnalyzer Logging IP address 10.0.1.250 Test Connectivity Logging to ADOM root Storage usage 144.55 MiB / 50.00 GiB Analytics usage 91.02 MiB / 35.00 GiB (Number of days stored: 55/60) Archive usage 53.53 MiB / 15.00 GiB (Number of days stored: 54/365) Upload option e Real Time Every Minute Every 5 Minutes SSL encrypt log transmission Allow access to FortiGate REST API Verify FortiAnalyzer certificate © FAZ-VMTM19008187 © FortiClient Endpoint Management System (EMS) Name EMSServer
IP/Domain Name 10.0.1,100
Serial Number FCTEMS0000100991 Admin User admin



Based on the FortiGate Security Fabric settings shown in the exhibits, what must an administrator do on the EMS server to successfully quarantine an endpoint. when it is detected as a compromised host (loC)?

Refer to the exhibit.



An administrator has restored the modified XML configuration file to FortiClient and sees the error shown in the exhibit. Based on the XML settings shown in the exhibit, what must the administrator do to resolve the issue with the XML configuration file?

Refer to the exhibit, which shows FortiClient EMS deployment, profiles.



When an administrator creates a deployment profile on FortiClient EMS. which statement about the deployment profile is true?

An administrator installs FortiClient on Windows Server.

What is the default behavior of real-time protection control?