FortiClient EMS assigns policies to endpoints based on priority, starting with the lowest number (highest priority). EMS evaluates policies in ascending order of their priority number. The first policy that matches the endpoint's group membership is applied, and the evaluation stops. In this case, the endpoint is in the trainingAD group. EMS first checks the "Sales" policy (Priority 1) but finds no match. It then checks the "Training" policy (Priority 2), which matches the trainingAD group. Therefore, the "Training" policy is applied.

B. Both the Sales and Training policies because their priority is higher than the Default policy. Only a single endpoint policy can be active on an endpoint at any given time.

C. The Default policy because it has the highest priority. The Default policy has the highest number (10), which signifies the lowest priority. It is a catch-all policy.

D. The sales policy. The endpoint is not a member of the SalesAD group, so the "Sales" policy criteria are not met.

FortiClient EMS 7.4 Administration Guide, "Endpoints," page 61, "Policy assignment and priority." The guide states, "EMS checks policies in order of priority, from lowest number to highest number. EMS assigns the first matching policy to the endpoint."