View all questions & answers for the NSE 6 - FortiClient EMS 7.4 Administrator Exam Materials exam

NSE 6 - FortiClient EMS 7.4 Administrator Exam Materials - Question #35 Discussion

Comment Image Comment Image Comment Image
Question Diagram

Refer to the exhibits. A FortiClient user is no longer able to access a protected server using zero trust network access (ZTNA). What is causing the access problem? (Choose one answer)

  • A. The FortiClient client certificate was not issued by the trusted EMS server.
  • B. FortiClient is disconnected from FortiClient EMS.
  • C. FortiGate cannot detect the gateway for FortiClient.
  • D. FortiClient is classified as off-fabric.
Correct Answer: B

Brave-Dump Community Votes

Answer: B (3 votes) 50%
Answer: C (2 votes) 33.33%
Answer: A (1 vote) 16.67%

Community Explanations & Comments (6)

Anonymous99 1 year ago
Selected: A
Refer FCP - FortiClient EMS 7.4 Administrator Study_Guide pg 221
mahmoud mostafa 10 months ago
for answer <<<<A>>>>The FortiClient client certificate was not issued by the trusted EMS server: The fact that the client certificateUID& SN and EMS certificate SN are present in the diagnostic output suggests that the FortiGate at least recognizes the certificate chain information that EMS provided, so the core problem isn't that the source is untrusted, but that the registration status is problematic. its trusted but not authorized so I think Answer is <<<B>>>
mahmoud mostafa 10 months ago
for answer <<<<A>>>>The FortiClient client certificate was not issued by the trusted EMS server: The fact that the client certificateUID& SN and EMS certificate SN are present in the diagnostic output suggests that the FortiGate at least recognizes the certificate chain information that EMS provided, so the core problem isn't that the source is untrusted, but that the registration status is problematic. its trusted but not authorized so I think Answer is <<<B>>>
Anonymous User 9 months ago
Selected: C
In the first exhibit is possible see the client connect with EMS and the information about UID e SN is correct too. So ithink that <C> is correct answer.
Anonymous User 9 months ago
Selected: B
As debug said: not registered. B should be the answer.
skouba 8 months ago
Selected: B
i think B by debug log
FME 7 months ago
Selected: B
causes "not-registered" .The diagnose endpoint ec-shm list command (used in FortiOS 7.4.2+) displays ZTNA-tagged endpoints synced from EMS. If it shows no registered users, it indicates a failure in the communication chain between FortiClient, EMS, and FortiGate, often caused by incorrect ZTNA tagging, EMS connectivity, or FortiClient not sharing data.
Anonymous User 3 months ago
Selected: C
The first image shows the FCT is connected and managed from EMS.