NSE7 Advanced VPN and Zero Trust Practice Question
A company uses FortiClient EMS for endpoint compliance and ZTNA tag assignment. An administrator wants to enforce that only endpoints with a ZTNA tag 'Compliant' can access a specific internal application through ZTNA. Which configuration is required on the FortiGate?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a ZTNA access proxy and a ZTNA policy that references the 'Compliant' tag
ZTNA access proxy policies combine a firewall policy with ZTNA rules. The tag condition is defined in the ZTNA policy, which specifies the required ZTNA tags to allow access.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Create a ZTNA access proxy and a ZTNA policy that references the 'Compliant' tag
Why this is correct
ZTNA access proxy and policy are used to publish applications; the policy can require specific tags.
- ✗
Add a firewall policy with source set to the tag object
Why it's wrong here
Firewall policies cannot directly reference ZTNA tags; ZTNA policies handle tag conditions.
- ✗
Configure an SSL VPN portal and assign the tag as a group
Why it's wrong here
SSL VPN does not use ZTNA tags.
- ✗
Configure a security policy with FortiClient endpoint control
Why it's wrong here
FortiClient endpoint control is for VPN posture, not ZTNA application access.
Go deeper
Related to this question
About these practice questions
Courseiva writes every NSE7 question from scratch — 940 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.