NSE7 Advanced VPN and Zero Trust Practice Question
A company wants to ensure that only company-managed laptops with up-to-date antivirus can access the internal file server remotely. Which Fortinet solution integrates with FortiGate to enforce device compliance before granting ZTNA access?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
FortiClient EMS
FortiClient EMS (Endpoint Management Server) manages FortiClient endpoints and can enforce compliance policies. It integrates with FortiGate to provide device posture information via ZTNA tags, enabling access control based on compliance.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
FortiClient EMS
Why this is correct
FortiClient EMS manages endpoint security and compliance, and provides posture data to FortiGate for ZTNA access control.
- ✗
FortiAnalyzer
Why it's wrong here
FortiAnalyzer provides logging and reporting, not endpoint compliance enforcement.
- ✗
FortiSandbox
Why it's wrong here
FortiSandbox is for advanced threat detection, not endpoint compliance.
- ✗
FortiWeb
Why it's wrong here
FortiWeb is a web application firewall, not related to endpoint management.
Go deeper
Related to this question
About these practice questions
One of 940 original NSE7 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on NSE7
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. An organization uses FortiClient EMS to enforce compliance on endpoints. They want to ensure that only devices with updated antivirus definitions can access the corporate VPN. Which FortiClient configuration should be applied?
easy- ✓ A.Create a compliance rule in FortiClient EMS to check antivirus definitions
- B.Use a firewall policy to block traffic from non-compliant devices
- C.Configure a ZTNA tag that requires updated antivirus
- D.Enable CASB in the ZTNA proxy
Why A: Compliance rules in FortiClient EMS check endpoint posture, such as antivirus status. The rule can be configured to require up-to-date antivirus definitions before allowing VPN access.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.