NSE7 Advanced VPN and Zero Trust Practice Question
A FortiGate administrator wants to integrate FortiClient EMS with FortiGate for ZTNA. Which TWO components must be configured on FortiGate to enable ZTNA access?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A ZTNA proxy policy
ZTNA requires a proxy policy to define access rules and a ZTNA proxy/gateway to terminate user connections. Tags and EMS are configured separately.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
A ZTNA proxy policy
Why this is correct
The proxy policy defines which users and devices can access which applications based on tags.
- ✗
A firewall policy to allow traffic from ZTNA proxy to internal servers
Why it's wrong here
The proxy policy handles that; an additional firewall policy is not needed if proxy is correctly configured.
- ✓
A ZTNA proxy (gateway) configuration
Why this is correct
The proxy/gateway is the entry point for ZTNA traffic on FortiGate.
- ✗
A ZTNA tag on the application server
Why it's wrong here
Tags are configured in EMS, not on FortiGate itself.
- ✗
FortiClient EMS registration on FortiGate
Why it's wrong here
EMS registration is required for tag synchronization, but not directly for ZTNA proxy functionality.
Go deeper
Related to this question
About these practice questions
Courseiva writes every NSE7 question from scratch — 940 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.