Refer to the exhibits.


Which shows the configuration of endpoint policies.
Based on the configuration, what will happen when someone logs in with the user account student on an endpoint in the trainingAD domain?
Based on the configuration shown in the exhibits:
There are three endpoint policies configured: Training, Sales, and Default.
The 'Training' policy is assigned to the 'trainingAD.training.lab' group.
The 'Sales' policy is assigned to 'All Groups' and 'trainingAD.training.lab/student.'
The 'Default' policy has no specific groups assigned.
When someone logs in with the user account 'student' on an endpoint in the 'trainingAD' domain:
The 'Training' policy is specifically assigned to the 'trainingAD.training.lab' group.
The 'Sales' policy includes 'trainingAD.training.lab/student' but not the general 'trainingAD.training.lab' group.
The system will prioritize the most specific match for the group.
Therefore, FortiClient EMS will assign the 'Training' policy to the 'student' account logging into the 'trainingAD' domain as it matches the group 'trainingAD.training.lab' directly.
Reference
FortiClient EMS 7.2 Study Guide, Endpoint Policy Configuration Section
FortiClient EMS Documentation on Group Policy Assignment and Matching
Rodolfo
17 hours agoSamira
6 days agoMona
11 days agoSheridan
16 days agoRodolfo
21 days agoSamira
27 days agoMona
1 month agoRozella
1 month agoMarkus
1 month agoLynelle
2 months agoMarva
2 months agoEleonora
2 months agoLaura
2 months agoGlory
2 months agoSon
2 months agoIlene
3 months ago