NSE7_ZTA-7.2 試験問題を無料オンラインアクセス

exhibit.

User student is not able to log in to SSL VPN
Given the output showing a real-time debug: which statement describes the login failure?

• A.CN does not match the user peer configuration
• B.Unable to verify chain of trust for the peer certificate
• C.student is not part of the usergroup SSL_VPN_Users.
• D.Client certificate has expired

Exhibit.

Which port group membership should you enable on FortiNAC to isolate rogue hosts'?

• A.Forced Remediation
• B.Forced Registration
• C.Reset Forced Registration
• D.Forced Authentication

What are the three core principles of ZTA? (Choose three.)

• A.Minimal access
• B.Be compliant
• C.Assume breach
• D.Verity
• E.Certify

FortiNAC has alarm mappings configured for MDM compliance failure, and FortiClient EMS is added as a MDM connector When an endpoint is quarantined by FortiClient EMS, what action does FortiNAC perform?

• A.The host is disabled
• B.The host is forced to authenticate again
• C.The host is marked at risk
• D.The host is isolated in the registration VLAN

What are two functions of NGFW in a ZTA deployment? (Choose two.)

• A.Endpoint vulnerability management
• B.Acts as segmentation gateway
• C.Device discovery and profiling
• D.Packet Inspection