What does FortiClient do as a fabric agent? (Choose two.)

As a Security Fabric agent, FortiClient's primary roles are to provide endpoint visibility and enable automated responses. It gathers and shares detailed endpoint telemetry with the Security Fabric, which includes a full inventory of installed applications. It also acts as an enforcement point, carrying out automated actions—such as quarantining an endpoint—when triggered by a Fabric device like FortiGate or a FortiSoC playbook. These two functions are central to the Fabric's ability to see and act on threats across the entire attack surface.

A. Provides IOC verdicts. While FortiClient's antivirus/antimalware engine detects threats (which can be based on IOCs), its primary fabric role is sharing telemetry and enforcing actions, not just providing verdicts.

B. Creates dynamic policies. FortiGate creates dynamic policies (like ZTNA rules or firewall policies) based on endpoint information and tags provided by FortiClient, but FortiClient itself does not create these policies.

Fortinet FortiClient Data Sheet, "Security Fabric Integration." The document explicitly lists "Endpoint Visibility" (including "installed applications") and "Automated Threat Response" as key capabilities of FortiClient's integration with the Security Fabric.

FortiClient EMS 7.4.0 Administration Guide, "Introduction to FortiClient EMS," page 9. The guide states, "FortiClient...shares endpoint telemetry with the Security Fabric, and can automate response to threats."