Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: validbest

Pass the Fortinet Certified Solution Specialist FCSS_SASE_AD-25 Questions and answers with ValidTests

Exam FCSS_SASE_AD-25 All Questions
Exam FCSS_SASE_AD-25 Premium Access

View all detail and faqs for the FCSS_SASE_AD-25 exam

Viewing page 2 out of 2 pages
Viewing questions 11-20 out of questions
Questions # 11:

Which two additional features does FortiClient integration provide with FortiSASE, when compared to secure web gateway (SWG) deployment? (Choose two.)

Options:

A.

vulnerability management

B.

device posture check

C.

inline-CASB protection

D.

SSL inspection

Expert Solution
Questions # 12:

Which service is included in a secure access service edge (SASE) solution, but not in a security service edge (SSE) solution?

Options:

A.

ZTNA

B.

SD-WAN

C.

SWG

D.

CASB

Expert Solution
Questions # 13:

Refer to the exhibits.

Question # 13

Question # 13

Antivirus is installed on a Windows 10 endpoint, but the windows application firewall is stopping it from running.

What will the endpoint security posture check be?

Options:

A.

FortiClient will tag the endpoint as FortiSASE-Non-Compliant.

B.

FortiClient will be unmanaged from FortiSASE due to failed compliance.

C.

FortiClient will trigger network lockdown on the endpoint.

D.

FortiClient will prompt the user to enable antivirus.

Expert Solution
Questions # 14:

An administrator must restrict endpoints from certain countries from connecting to FortiSASE.

Which configuration can achieve this?

Options:

A.

Configure a network lockdown policy on the endpoint profiles.

B.

Configure a geography address object as the source for a deny policy.

C.

Configure geofencing to restrict access from the required countries.

D.

Configure source IP anchoring to restrict access from the specified countries.

Expert Solution
Questions # 15:

A customer wants to ensure secure access for private applications for their users by replacing their VPN.

Which two SASE technologies can you use to accomplish this task? (Choose two.)

Options:

A.

zero trust network access (ZTNA)

B.

secure SD-WAN

C.

secure web gateway (SWG) and cloud access security broker (CASB)

D.

SD-WAN on-ramp

Expert Solution
Questions # 16:

Refer to the exhibit.

Question # 16

The daily report for application usage for internet traffic shows an unusually high number of unknown applications by category.

What are two possible explanations for this? (Choose two.)

Options:

A.

Certificate inspection is not being used to scan application traffic.

B.

Deep inspection is not being used to scan traffic.

C.

The private access policy must be to set to log Security Events.

D.

The inline-CASB application control profile does not have application categories set to Monitor.

Questions # 17:

Which authentication method overrides any other previously configured user authentication on FortiSASE?

Options:

A.

MFA

B.

Local

C.

RADIUS

D.

SSO

Questions # 18:

Refer to the exhibit.

Question # 18

A customer needs to implement device posture checks for their remote endpoints while accessing the protected server. They also want the TCP traffic between the remote endpoints and the protected servers to be processed by FortiGate.

In this scenario, which two setups will achieve these requirements? (Choose two.)

Options:

A.

Configure ZTNA servers and ZTNA policies on FortiGate.

B.

Configure FortiGate as a zero trust network access (ZTNA) access proxy.

C.

Configure ZTNA tags on FortiGate.

D.

Configure private access policies on FortiSASE with ZTNA.

Questions # 19:

What is required to enable the MSSP feature on FortiSASE?

Options:

A.

Role-based access control (RBAC) must be assigned to identity and access management (IAM) users using the FortiCloud IAM portal.

B.

The MSSP add-on license must be applied to FortiSASE.

C.

MSSP user accounts and permissions must be configured on the FortiSASE portal.

D.

Multi-tenancy must be enabled on the FortiSASE portal.

Questions # 20:

Refer to the exhibit.

Question # 20

An organization must inspect all the endpoint internet traffic on FortiSASE, and exclude Google Maps traffic from the FortiSASE VPN tunnel and redirect it to the endpoint physical interface.

Which configuration must you apply to achieve this requirement?

Options:

A.

Configure a steering bypass tunnel firewall policy using Google Maps FQDN to exclude and redirect the traffic.

B.

Add the Google Maps URL in the zero trust network access (ZTNA) TCP access proxy forwarding rule.

C.

Add the Google Maps URL as a steering bypass destination in the endpoint profile.

D.

Exempt Google Maps in URL filtering in the web filter profile.

Viewing page 2 out of 2 pages
Viewing questions 11-20 out of questions