Exam NSE4_FGT-7.2 topic 1 question 22 discussion

C. ZTNA provides a security posture check. D. ZTNA provides role-based access. ZTNA (Zero Trust Network Access) is a security architecture that is designed to provide secure access to network resources for users, devices, and applications. It is based on the principle of "never trust, always verify," which means that all access to network resources is subject to strict verification and authentication. Two functions of ZTNA are: ZTNA provides a security posture check: ZTNA checks the security posture of devices and users that are attempting to access network resources. This can include checks on the device's software and hardware configurations, security settings, and the presence of malware. ZTNA provides role-based access: ZTNA controls access to network resources based on the role of the user or device. Users and devices are granted access to only those resources that are necessary for their role, and all other access is denied. This helps to prevent unauthorized access and minimize the risk of data breaches.

CD are the correct answers

Correct: A. ZTNA manages access through the client only. (client or browser) B. ZTNA manages access for remote users only. (not just remote) C. ZTNA provides a security posture check. D. ZTNA provides role-based access. FortiGate Infrastructure 7.2 Study Guide (p.165): "ZTNA is an access control method that uses client device identification, authentication, and zero-trust tags to provide role-based application access." "IP/MAC filtering uses ZTNA tags to provide an additional factor for identification, and a security posture check to implement role-based zero-trust access." Reference and download study guide: https://ebin.pub/fortinet-fortigate-infrastructure-study-guide-for-fortios-72.html

FortiGate Infrastructure 7.2 Study Guide p.165

7.2 INF 165

C. ZTNA provides a security posture check. D. ZTNA provides role-based access.

ZTNA is for both internal users and remote users.