I85PREP
⌘ K
Fortinet FCA study materials
Fortinet FCA study resources

Fortinet FCA practice questions

One question at a time. Build your Fortinet FCA understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet operating system runs on FortiGate next-generation firewalls and provides the core security services such as firewall policies, IPS, and VPN?

  1. FortiOS Correct answer.
  2. FortiManager OS
  3. FortiGuard OS
  4. FortiAnalyzer OS

Explanation

FortiOS is the security operating system embedded in FortiGate appliances and virtual machines; it implements firewall policies, intrusion prevention, VPN, and the rest of the NGFW feature set. The other names refer to services or management products rather than the firewall operating system itself.

Question 2Fortinet Platform and Product Portfolio Fundamentals

A customer wants a single appliance that combines firewall, antivirus, intrusion prevention, and web filtering at a branch office. Which Fortinet product category is designed for this?

  1. FortiGate next-generation firewall Correct answer.
  2. FortiMail secure email gateway
  3. FortiAP wireless access point
  4. FortiSwitch access switch

Explanation

FortiGate is Fortinet's NGFW platform and consolidates firewall, application control, IPS, antivirus, and web filtering in one device. FortiSwitch and FortiAP provide Layer 2 connectivity and wireless access, and FortiMail focuses on email security rather than general branch perimeter security.

Question 3Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet product provides centralized policy and device management for many FortiGate devices from a single console?

  1. FortiAnalyzer
  2. FortiSandbox
  3. FortiManager Correct answer.
  4. FortiAuthenticator

Explanation

FortiManager is the centralized management platform used to push policy packages, firmware, and configuration to many FortiGate and other Fortinet devices. FortiAnalyzer collects and analyzes logs, while FortiAuthenticator handles identity and FortiSandbox performs dynamic malware analysis.

Question 4Fortinet Platform and Product Portfolio Fundamentals

Which subscription service supplies FortiGate devices with continuously updated threat intelligence such as antivirus signatures, IPS signatures, and web filter categories?

  1. FortiGuard Labs services Correct answer.
  2. FortiCare support
  3. FortiExtender
  4. FortiCloud

Explanation

FortiGuard Labs produces and distributes the threat intelligence behind services like antivirus, IPS, application control, and web filtering. FortiCare is the support entitlement program, FortiCloud is a cloud service portal, and FortiExtender is cellular WAN extension hardware.

Question 5Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet product is purpose-built to detect and block phishing, spam, and malware in email traffic before it reaches users?

  1. FortiMail Correct answer.
  2. FortiNAC
  3. FortiWeb
  4. FortiSIEM

Explanation

FortiMail is Fortinet's secure email gateway, applying antispam, antivirus, and content policies to inbound and outbound email. FortiWeb protects web applications, FortiNAC controls network access, and FortiSIEM aggregates security events.

Question 6Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet platform is used to protect web applications and APIs from attacks such as SQL injection and cross-site scripting?

  1. FortiGate
  2. FortiProxy
  3. FortiWeb Correct answer.
  4. FortiADC

Explanation

FortiWeb is the web application firewall product line, inspecting HTTP and HTTPS traffic for application-layer attacks and API abuse. FortiGate is a network firewall, FortiADC is an application delivery controller, and FortiProxy is a secure web proxy.

Question 7Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet offering delivers security functions as a cloud-hosted service so that remote users and branch sites can be protected without on-premises appliances?

  1. FortiSwitch
  2. FortiSASE Correct answer.
  3. FortiRugged
  4. FortiDisk

Explanation

FortiSASE is Fortinet's secure access service edge offering, converging cloud-delivered networking and security for remote users and thin branch locations. The other options are switching hardware and ruggedized or storage-related product names rather than cloud security services.

Question 8Fortinet Platform and Product Portfolio Fundamentals

A customer needs to segment internal network traffic and enforce security policy between VLANs without routing all traffic through the perimeter firewall. Which Fortinet architecture concept supports this?

  1. Security Fabric with internal segmentation Correct answer.
  2. Flat Layer 2 switching without inspection
  3. Standalone endpoint antivirus only
  4. Edge-only perimeter firewalling

Explanation

Fortinet's Security Fabric approach encourages internal segmentation firewalls and integrated switching so east-west traffic can be inspected between segments. Relying only on a perimeter firewall leaves internal lateral movement uninspected, and a flat network removes the segmentation points entirely.

Question 9Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet product provides network access control by discovering and profiling endpoints and enforcing admission policy on switches and wireless?

  1. FortiMail
  2. FortiDeceptor
  3. FortiNAC Correct answer.
  4. FortiSandbox

Explanation

FortiNAC performs network access control: it discovers and profiles devices, then applies admission or quarantine policy through integration with switches and wireless controllers. FortiSandbox analyzes files, FortiDeceptor is a deception platform, and FortiMail secures email.

Question 10Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet product is a deception platform that places decoys and lures across the network to detect attackers who have bypassed preventive controls?

  1. FortiSIEM
  2. FortiEDR
  3. FortiDeceptor Correct answer.
  4. FortiAuthenticator

Explanation

FortiDeceptor deploys decoy assets and tokens so that any interaction with them signals compromise, giving early detection of intruders. FortiEDR protects endpoints, FortiSIEM correlates events, and FortiAuthenticator manages identity and authentication.

Question 11Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet solution focuses on detecting and responding to threats on endpoints such as workstations and servers, including blocking malicious processes after execution?

  1. FortiEDR Correct answer.
  2. FortiAnalyzer
  3. FortiGate
  4. FortiWeb

Explanation

FortiEDR is the endpoint detection and response platform, monitoring endpoint behavior and containing malicious activity post-execution. FortiGate, FortiWeb, and FortiAnalyzer operate at the network, application, and log-analysis layers respectively.

Question 12Fortinet Platform and Product Portfolio Fundamentals

A security team wants a platform that ingests logs from Fortinet and third-party devices, correlates events, and supports security operations workflows. Which product fits best?

  1. FortiManager
  2. FortiAP
  3. FortiSwitch
  4. FortiSIEM Correct answer.

Explanation

FortiSIEM combines SIEM, event correlation, and security operations capabilities, ingesting data from many sources including third-party vendors. FortiManager manages Fortinet device configuration, while FortiSwitch and FortiAP are access-layer hardware.

Question 13Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet product provides application delivery control functions such as server load balancing, SSL offload, and health checks for backend applications?

  1. FortiWeb
  2. FortiGate
  3. FortiADC Correct answer.
  4. FortiProxy

Explanation

FortiADC is the application delivery controller line, handling load balancing, SSL offload, and availability checks for application servers. FortiWeb is a WAF, FortiGate is a network firewall, and FortiProxy is a secure web proxy.

Question 14Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet service provides cloud-based sandboxing so that suspicious files can be detonated and analyzed when an on-premises FortiSandbox is not deployed?

  1. FortiCloud Backup
  2. FortiGuard Cloud Sandboxing Correct answer.
  3. FortiCare Premium
  4. FortiExtender Service

Explanation

FortiGuard cloud sandboxing lets FortiGate and other products submit suspicious files to a cloud sandbox for dynamic analysis without owning a FortiSandbox appliance. FortiCare is support, FortiCloud Backup stores configuration backups, and FortiExtender Service relates to cellular connectivity.

Question 15Fortinet Platform and Product Portfolio Fundamentals

A customer is choosing between FortiGate hardware models and needs the specification that indicates the maximum inspected throughput with security profiles enabled. Which specification is most relevant?

  1. Threat protection throughput Correct answer.
  2. Number of fan modules
  3. Mean time between failures
  4. Rack unit height

Explanation

Threat protection throughput reflects performance with multiple security profiles such as IPS, application control, and antivirus enabled, which is the realistic sizing figure for security inspection. MTBF, rack units, and fan count describe reliability or physical form factor rather than inspected throughput.

Question 16Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet management product is primarily responsible for collecting, storing, and reporting on FortiGate logs for compliance and threat analysis?

  1. FortiAuthenticator
  2. FortiManager
  3. FortiAnalyzer Correct answer.
  4. FortiSandbox

Explanation

FortiAnalyzer receives logs from FortiGate and other Fortinet devices, stores them, and produces reports and analytics for compliance and investigations. FortiManager handles configuration, FortiAuthenticator handles identity, and FortiSandbox analyzes files.

Question 17Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet product family provides identity and access management functions such as two-factor authentication and integration with directory services for VPN and administrative access?

  1. FortiADC
  2. FortiDeceptor
  3. FortiNAC
  4. FortiAuthenticator Correct answer.

Explanation

FortiAuthenticator delivers authentication services including MFA, certificate management, and directory integration used for VPN and admin logon. FortiNAC controls network admission, FortiDeceptor provides deception, and FortiADC balances application traffic.

Question 18Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet product is a secure web proxy that can enforce acceptable-use policy and apply content filtering for outbound web traffic?

  1. FortiProxy Correct answer.
  2. FortiSIEM
  3. FortiMail
  4. FortiWeb

Explanation

FortiProxy is Fortinet's secure web gateway product, providing explicit and transparent proxying, content filtering, and acceptable-use enforcement. FortiWeb is a WAF, FortiMail secures email, and FortiSIEM performs event analytics.

Question 19Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet wireless product typically requires a FortiGate or FortiLAN Cloud controller to provide centralized configuration and security policy for the access points?

  1. FortiSwitch
  2. FortiAP Correct answer.
  3. FortiExtender
  4. FortiRecorder

Explanation

FortiAP access points are managed by a FortiGate acting as a wireless controller or by FortiLAN Cloud, which centralizes SSID configuration and policy. FortiSwitch is wired switching, FortiExtender extends WAN connectivity, and FortiRecorder handles video surveillance.

Question 20Fortinet Platform and Product Portfolio Fundamentals

A customer wants to extend FortiGate security policy to a public cloud environment and manage it alongside on-premises firewalls. Which Fortinet capability addresses this?

  1. FortiGate-VM managed through FortiManager and Fabric integrations Correct answer.
  2. FortiAP mesh only
  3. FortiSwitch stacking only
  4. FortiRecorder deployment

Explanation

FortiGate-VM instances run FortiOS in public clouds and can be managed centrally with FortiManager while participating in the Security Fabric. Switch stacking, wireless mesh, and video recording do not deliver cloud firewall policy extension.

Question 21Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet product is designed for operational technology and industrial control environments, supporting rugged deployment and OT protocol visibility?

  1. FortiAuthenticator
  2. FortiSIEM
  3. FortiMail
  4. FortiGate Rugged series Correct answer.

Explanation

The FortiGate Rugged series is built for harsh OT and industrial environments and supports visibility into industrial protocols. FortiMail, FortiAuthenticator, and FortiSIEM are email, identity, and analytics products not positioned as rugged OT appliances.

Question 22Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet service entitlement gives customers access to firmware updates, technical support, and hardware replacement depending on the purchased tier?

  1. FortiCloud
  2. FortiGuard
  3. FortiCare Correct answer.
  4. FortiSandbox

Explanation

FortiCare is the support program covering firmware access, technical assistance, and hardware replacement according to the chosen support tier. FortiGuard delivers security subscriptions, FortiCloud is a cloud portal, and FortiSandbox is a product.

Question 23Fortinet Platform and Product Portfolio Fundamentals

An organization wants one console to see security events across FortiGate, FortiSwitch, FortiAP, and endpoint agents, with automation that can quarantine a compromised host. Which Fortinet concept describes this integrated visibility and response?

  1. Flat network design
  2. Security Fabric Correct answer.
  3. Single-sign-on only
  4. Standalone point products

Explanation

The Security Fabric ties Fortinet products together so telemetry is shared and automated responses, such as quarantining a host, can be triggered from a single console. Standalone point products and flat designs lack the integration, and SSO addresses authentication only.

Question 24Fortinet Platform and Product Portfolio Fundamentals

A customer with a small IT team asks which Fortinet cloud service can provide centralized management and logging for FortiGate devices without deploying on-premises FortiManager and FortiAnalyzer appliances. Which answer best fits?

  1. FortiAP local bridging only
  2. FortiExtender cellular failover
  3. FortiSwitch standalone stacking
  4. FortiCloud management and logging services Correct answer.

Explanation

FortiCloud offers cloud-hosted management and logging options that let small teams centralize FortiGate administration and log retention without owning management appliances. Switch stacking, local wireless bridging, and cellular failover address connectivity rather than centralized management.

Question 25Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet product line provides video surveillance management and recording, integrating cameras and event monitoring into the broader portfolio?

  1. FortiProxy
  2. FortiWeb
  3. FortiRecorder Correct answer.
  4. FortiNAC

Explanation

FortiRecorder is the video management product that records and manages camera feeds, with FortiCamera as the associated camera line. FortiWeb, FortiNAC, and FortiProxy are web security, access control, and proxying products.

Question 26Fortinet Platform and Product Portfolio Fundamentals

A customer wants to understand how Fortinet organizes its portfolio around three core pillars. Which set of pillars describes the Fortinet Security Fabric positioning?

  1. Log analytics, ticketing, and compliance reporting
  2. Network security, unified management, and Security Fabric integration Correct answer.
  3. Wireless access, switching, and WAN optimization
  4. Endpoint detection, cloud sandboxing, and identity federation

Explanation

Fortinet presents its portfolio around broad, integrated, and automated protection, with network security as the anchor, unified management as the operational layer, and Security Fabric integration tying products together. The other answer sets mix in individual product functions rather than portfolio-level pillars.

Question 27Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet operating system runs across FortiGate firewalls and several other Security Fabric products, providing a common policy and configuration model?

  1. FortiManager OS
  2. FortiClient OS
  3. FortiAnalyzer OS
  4. FortiOS Correct answer.

Explanation

FortiOS is the security operating system that powers FortiGate and is reused in many other Fortinet products, which is central to the Fabric's shared policy model. FortiManager and FortiAnalyzer are management and analytics products, and FortiClient is an endpoint agent rather than a shared network security OS.

Question 28Fortinet Platform and Product Portfolio Fundamentals

A small business wants a single appliance that combines firewall, VPN, intrusion prevention, and web filtering at the network edge. Which Fortinet product category fits this requirement?

  1. FortiNAC network access control
  2. FortiMail secure email gateway
  3. FortiGate next-generation firewall Correct answer.
  4. FortiDeceptor deception platform

Explanation

FortiGate is the next-generation firewall platform that consolidates routing, firewall, VPN, IPS, application control, and web filtering in one appliance. FortiMail, FortiNAC, and FortiDeceptor each address narrower security functions and do not replace an edge NGFW.

Question 29Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet product family is purpose-built to secure email traffic by filtering spam, phishing, and malicious attachments before delivery to users?

  1. FortiSIEM
  2. FortiSandbox
  3. FortiWeb
  4. FortiMail Correct answer.

Explanation

FortiMail is the secure email gateway family that inspects inbound and outbound mail for spam, phishing, malware, and policy violations. FortiWeb protects web applications, FortiSandbox detonates suspicious files, and FortiSIEM correlates events rather than filtering mail.

Question 30Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet product is the centralized management platform used to deploy policy and configuration consistently to many FortiGate devices?

  1. FortiAnalyzer
  2. FortiGate Cloud
  3. FortiAuthenticator
  4. FortiManager Correct answer.

Explanation

FortiManager provides centralized configuration, policy deployment, and device provisioning for FortiGate and other Fabric devices. FortiAnalyzer focuses on log collection and analytics, FortiGate Cloud is a hosted management and logging service, and FortiAuthenticator handles identity services.

Question 31Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet product is a secure SD-WAN capability delivered within FortiGate rather than as a separate standalone appliance?

  1. FortiSwitch Secure SD-WAN
  2. FortiWAN Controller
  3. FortiExtender Secure SD-WAN
  4. FortiGate Secure SD-WAN Correct answer.

Explanation

Fortinet delivers Secure SD-WAN as a function of FortiOS on FortiGate, so WAN path selection and policy are enforced by the same appliance that provides NGFW security. FortiSwitch and FortiExtender are access and extension products, and there is no separate FortiWAN Controller product for this purpose.

Question 32Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet product provides secure remote access by terminating SSL and IPsec VPN tunnels for mobile users and branch sites?

  1. FortiAP
  2. FortiCamera
  3. FortiSwitch
  4. FortiGate Correct answer.

Explanation

FortiGate acts as the VPN concentrator for both SSL VPN and IPsec tunnels, applying firewall policy to remote user and site traffic. FortiAP, FortiSwitch, and FortiCamera are access layer and physical security products that do not terminate enterprise VPN tunnels.

Question 33Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet offering is a cloud-delivered subscription that provides security ratings and continuous assessment of an organization's external attack surface?

  1. FortiGuard Labs
  2. FortiRecon Correct answer.
  3. FortiCare
  4. FortiCloud Sandbox

Explanation

FortiRecon is the digital risk protection service that continuously assesses external exposure and brand risk. FortiGuard Labs is the threat research organization, FortiCare is the support entitlement program, and cloud sandboxing is delivered through FortiSandbox Cloud.

Question 34Fortinet Platform and Product Portfolio Fundamentals

An administrator needs to understand why FortiGate is described as consolidating multiple security functions. Which statement best describes that consolidation model?

  1. One FortiOS image enforces firewall, IPS, application control, and web filtering through a single policy Correct answer.
  2. FortiGate enforces only stateful firewall and routing, delegating all inspection to FortiWeb
  3. Each security function requires a separate dedicated appliance from a different Fortinet family
  4. Security functions are only available when FortiGate is paired with FortiSandbox and FortiSIEM

Explanation

FortiGate runs FortiOS, which applies multiple inspection engines within one policy flow, avoiding the need to chain separate appliances for each function. This consolidation is the core reason FortiGate anchors the Security Fabric.

Question 35Fortinet Platform and Product Portfolio Fundamentals

A customer wants to extend the Security Fabric to third-party products such as an existing SIEM or endpoint tool. Which Fortinet capability supports this integration?

  1. FortiAP wireless profiles
  2. FortiSwitch VLAN trunking
  3. Fabric Connectors and the Fabric API Correct answer.
  4. FortiGate routing protocols

Explanation

Fabric Connectors and published APIs allow the Security Fabric to exchange telemetry and enforcement actions with third-party products. Routing protocols, VLAN trunking, and wireless profiles are networking functions that do not provide cross-vendor security integration.

Question 36Fortinet Platform and Product Portfolio Fundamentals

A company wants to enforce consistent security posture for laptops and mobile devices connecting to FortiGate, including checks before granting network access. Which Fortinet product provides this endpoint visibility and compliance enforcement?

  1. FortiMail
  2. FortiSwitch
  3. FortiClient with EMS Correct answer.
  4. FortiADC

Explanation

FortiClient is the endpoint agent that reports posture and enforces compliance, and FortiClient EMS provides centralized management of those endpoints. FortiADC, FortiMail, and FortiSwitch serve application delivery, email security, and switching roles respectively.

Question 37Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet product provides centralized logging and event correlation for Fabric devices and third-party sources, forming the analytics layer of the Security Fabric?

  1. FortiAuthenticator
  2. FortiAnalyzer Correct answer.
  3. FortiExtender
  4. FortiManager

Explanation

FortiAnalyzer collects logs, correlates events, and produces reports and dashboards across the Fabric. FortiManager handles configuration, FortiAuthenticator handles identity, and FortiExtender provides WAN extension connectivity.

Question 38Fortinet Platform and Product Portfolio Fundamentals

An organization wants to protect a data center web application and needs SSL inspection of inbound traffic plus protection against the OWASP Top 10. Which Fortinet product addresses this requirement?

  1. FortiSandbox
  2. FortiGate
  3. FortiNAC
  4. FortiWeb Correct answer.

Explanation

FortiWeb is the web application firewall that terminates inbound SSL and inspects HTTP requests for injection, cross-site scripting, and other application-layer attacks. FortiGate secures network traffic generally, while FortiSandbox and FortiNAC serve malware analysis and access control roles.

Question 39Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet product is a cloud-based service that provides centralized management, logging, and reporting for FortiGate deployments without on-premises management infrastructure?

  1. FortiAnalyzer Cloud
  2. FortiManager Cloud
  3. FortiClient EMS Cloud
  4. FortiGate Cloud Correct answer.

Explanation

FortiGate Cloud is the hosted service that offers management, logging, and reporting for FortiGate appliances, commonly used where no on-premises management stack exists. FortiManager Cloud and FortiAnalyzer Cloud are hosted versions of those specific products, and FortiClient EMS Cloud manages endpoints.

Question 40Fortinet Platform and Product Portfolio Fundamentals

A customer wants to add wireless access points that are managed by the existing FortiGate without deploying a separate wireless controller appliance. Which Fortinet product line fits?

  1. FortiExtender managed by FortiGate
  2. FortiSwitch managed by FortiGate
  3. FortiCamera managed by FortiGate
  4. FortiAP managed by FortiGate Correct answer.

Explanation

FortiAP access points can be managed directly by FortiGate, which acts as the wireless controller and applies unified policy to wireless clients. FortiSwitch, FortiExtender, and FortiCamera serve switching, WAN extension, and video surveillance roles.

Question 41Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet product provides identity services such as LDAP and RADIUS integration, certificate management, and token-based authentication for Fabric devices?

  1. FortiManager
  2. FortiAuthenticator Correct answer.
  3. FortiAnalyzer
  4. FortiSandbox

Explanation

FortiAuthenticator centralizes authentication, integrating with directory services and issuing or validating certificates and tokens. FortiAnalyzer, FortiManager, and FortiSandbox provide analytics, configuration management, and malware analysis respectively.

Question 42Fortinet Platform and Product Portfolio Fundamentals

A security operations team needs to correlate events from FortiGate, FortiMail, and third-party sources and apply automated playbooks. Which Fortinet product addresses this requirement?

  1. FortiWeb
  2. FortiSwitch
  3. FortiSOAR Correct answer.
  4. FortiSandbox

Explanation

FortiSOAR is the security orchestration, automation, and response platform that ingests events and executes playbooks for incident handling. FortiSandbox analyzes files, FortiWeb protects applications, and FortiSwitch provides switching.

Question 43Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet product provides file detonation and behavioral analysis of suspicious objects, and can be deployed on-premises or as a cloud service?

  1. FortiSandbox Correct answer.
  2. FortiADC
  3. FortiNAC
  4. FortiMail

Explanation

FortiSandbox runs suspicious files in an instrumented environment to observe malicious behavior and can be delivered on-premises or through FortiSandbox Cloud. FortiMail, FortiNAC, and FortiADC handle email security, access control, and application delivery.

Question 44Fortinet Platform and Product Portfolio Fundamentals

A customer is evaluating FortiGate models and wants to compare throughput with security profiles enabled rather than raw firewall throughput. Which specification should the customer review?

  1. Threat protection throughput Correct answer.
  2. Concurrent sessions
  3. Firewall throughput
  4. IPsec VPN throughput

Explanation

Threat protection throughput reflects performance with inspection profiles such as IPS and application control enabled, which is more representative of real deployments than raw firewall throughput. Firewall throughput and VPN throughput measure simpler traffic paths, and concurrent sessions measure capacity rather than inspection performance.

Question 45Fortinet Platform and Product Portfolio Fundamentals

An administrator wants FortiGate to share threat intelligence with other Fabric devices so that a detection on one device informs enforcement elsewhere. Which capability enables this?

  1. FortiAP channel planning
  2. Static routing redistribution
  3. FortiSwitch VLAN pruning
  4. Security Fabric automation stitches and indicators of compromise Correct answer.

Explanation

Automation stitches and IOC sharing let Fabric devices propagate detections and trigger coordinated responses across the fabric. Routing redistribution, VLAN pruning, and channel planning are networking functions that do not share threat intelligence.

Question 46Fortinet Platform and Product Portfolio Fundamentals

Which Fortinet product is designed to discover and profile all endpoints on a network and enforce admission policy based on device identity and posture?

  1. FortiAuthenticator
  2. FortiDeceptor
  3. FortiClient
  4. FortiNAC Correct answer.

Explanation

FortiNAC provides network access control by discovering and profiling endpoints and enforcing admission decisions. FortiClient is the endpoint agent, FortiAuthenticator handles identity services, and FortiDeceptor provides deception.

Question 47Fortinet Platform and Product Portfolio Fundamentals

A global enterprise needs a single pane of glass to view security events across FortiGate, FortiSwitch, FortiAP, and endpoints, with drill-down into individual devices. Which Fortinet capability delivers this?

  1. FortiAP local status page
  2. FortiGate CLI debug output
  3. Security Fabric topology view in FortiAnalyzer or FortiManager Correct answer.
  4. FortiSwitch standalone web GUI

Explanation

The Security Fabric topology view, presented in FortiAnalyzer or FortiManager, aggregates device health and events across the fabric with drill-down. CLI debug output and individual device GUIs show only local information and do not provide cross-fabric visibility.

Question 48Fortinet Platform and Product Portfolio Fundamentals

A customer wants to detect attackers who have already breached the network by observing interactions with decoy assets, without blocking legitimate production traffic. Which Fortinet product addresses this?

  1. FortiSIEM
  2. FortiSandbox
  3. FortiDeceptor Correct answer.
  4. FortiGate IPS

Explanation

FortiDeceptor deploys decoys and lures that attract attackers, generating high-fidelity alerts when they interact with fake assets. FortiGate IPS blocks known attack patterns inline, FortiSandbox analyzes files, and FortiSIEM correlates events without deploying deception assets.

Question 49Fortinet Platform and Product Portfolio Fundamentals

An organization must choose between an on-premises FortiManager deployment and a cloud-hosted management option for a large multi-tenant environment with strict data residency requirements. Which consideration most directly favors the on-premises deployment?

  1. Elimination of the need for FortiGate subscriptions
  2. Reduced need for administrative training
  3. Automatic inclusion of FortiSandbox licensing
  4. Data residency and control over where management data is stored Correct answer.

Explanation

On-premises FortiManager keeps configuration and management data within the organization's own infrastructure, which directly addresses data residency and control requirements. Training needs, subscription entitlements, and sandbox licensing are separate concerns that are not resolved by deployment location.

Question 50Fortinet Platform and Product Portfolio Fundamentals

A security architect is mapping Fortinet products to the Security Fabric's five core pillars. Which mapping correctly pairs a pillar with a representative Fortinet capability?

  1. Threat intelligence with FortiSwitch and FortiAP
  2. Security-driven networking with FortiGate and FortiSwitch integration Correct answer.
  3. Endpoint and device protection with FortiADC and FortiExtender
  4. Zero trust access with FortiMail and FortiWeb

Explanation

Security-driven networking is represented by the integration of FortiGate with FortiSwitch, FortiAP, and related network products. The other pairings mismatch pillars with products that serve email, application delivery, or wireless roles.