NSE7 Advanced VPN and Zero Trust Practice Question
An administrator receives an error when trying to create a ZTNA proxy rule: 'The ZTNA proxy rule requires a valid application mapping.' What does this indicate?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The application mapping object is not defined
A ZTNA proxy rule maps an external FQDN/port to an internal application. The error means the application mapping (which defines the internal server) is missing or misconfigured.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The FortiClient EMS is not reachable
Why it's wrong here
EMS reachability affects endpoint registration and tagging, not the application mapping referenced by the error. It is tempting because ZTNA depends on EMS for client identity, and connectivity would be the fault when endpoints fail to appear or synchronise in FortiClient EMS.
- ✓
The application mapping object is not defined
Why this is correct
A ZTNA proxy rule requires an application mapping object to define the protected application's FQDN, port, and certificate. Without that mapping, the rule has no target to proxy, so FortiGate rejects creation until the mapping is defined and referenced.
- ✗
The SSL certificate is missing
Why it's wrong here
A missing SSL certificate breaks TLS inspection or the proxy's own certificate presentation, not application mapping. It is tempting because certificate problems commonly block ZTNA traffic, and the certificate would be the culprit when HTTPS connections fail after the rule is created.
- ✗
The firewall policy is not in place
Why it's wrong here
A firewall policy governs traffic handling after a rule matches; it is not the application mapping the error demands. It is tempting because ZTNA proxy rules ultimately reference firewall policies, and a policy would be the missing piece when traffic is permitted but not inspected.
Go deeper
Related to this question
About these practice questions
This NSE7 question is part of Courseiva's 718-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.