FCSS_SASE_AD-24 · Question #44
Your organization is currently using FortiSASE for its cybersecurity. They have recently hired a contractor who will work from the HQ office and who needs temporary internet access in order to set…
The correct answer is C. Use zero trust network access (ZTNA) and tag the client as an unmanaged endpoint. The recommended way to provide temporary internet access to the contractor is to use Zero Trust Network Access (ZTNA) and tag the client as an unmanaged endpoint . ZTNA ensures that only authorized users and devices can access specific resources, while treating all endpoints as…
Question
Your organization is currently using FortiSASE for its cybersecurity. They have recently hired a contractor who will work from the HQ office and who needs temporary internet access in order to set up a web-based point of sale (POS) system. What is the recommended way to provide internet access to the contractor?
Options
- AUse FortiClient on the endpoint to manage internet access.
- BUse a proxy auto-configuration (PAC) file and provide secure web gateway (SWG) service as an
- CUse zero trust network access (ZTNA) and tag the client as an unmanaged endpoint.
- DConfigure a VPN policy on FortiSASE to provide access to the internet.
How the community answered
(26 responses)- A15% (4)
- B8% (2)
- C69% (18)
- D8% (2)
Explanation
The recommended way to provide temporary internet access to the contractor is to use Zero Trust Network Access (ZTNA) and tag the client as an unmanaged endpoint . ZTNA ensures that only authorized users and devices can access specific resources, while treating all endpoints as untrusted by default. By tagging the contractor's device as an unmanaged endpoint, you can apply strict access controls and ensure that the contractor has limited access to only the necessary resources (e.g., the web-based POS system) without exposing the internal network to unnecessary risks.
Topics
Community Discussion
No community discussion yet for this question.