NSE 7 – Zero Trust Access 7.2 — Question 13

Which statement is true about FortiClient EMS in a ZTNA deployment?

Answer options

• A. Uses endpoint information to grant or deny access to the network.
• B. Provides network and user identity authentication services.
• C. Generates and installs client certificates on managed endpoints.
• D. Acts as ZTNA access proxy for managed endpoints.

Correct answer: C

Explanation

The correct answer is C because FortiClient EMS is responsible for generating and installing client certificates to ensure secure communications for managed endpoints. Options A and B describe functions that are not specific to FortiClient EMS in the context of ZTNA, while option D incorrectly states the primary role of FortiClient EMS.