NSE7 Advanced VPN and Zero Trust Practice Question
An administrator wants to implement ZTNA with FortiClient EMS to control access to an internal web application. Which TWO components are essential for the ZTNA proxy to function correctly?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A firewall policy allowing traffic from the ZTNA gateway to the application server
A ZTNA proxy requires a configured application mapping (defining the internal server) and a firewall policy that permits traffic from the ZTNA gateway to the internal server.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
A static route on FortiGate pointing to the application server's network
Why it's wrong here
Routing is needed but not specific to ZTNA proxy functionality.
- ✗
SSL certificate installed on the application server
Why it's wrong here
The FortiGate terminates SSL, not the server.
- ✗
A public DNS record for the ZTNA gateway's FQDN
Why it's wrong here
Useful but not essential if clients use IP or internal DNS.
- ✓
A firewall policy allowing traffic from the ZTNA gateway to the application server
Why this is correct
The gateway forwards traffic to the server; policy must permit it.
- ✓
An application mapping object that specifies the internal server IP and port
Why this is correct
The proxy rule references this mapping to know where to forward.
Go deeper
Related to this question
About these practice questions
This NSE7 question is part of Courseiva's 940-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.