FCSS_SASE_AD-25 Exam Questions

An administrator must restrict endpoints from certain countries from connecting to FortiSASE. Which configuration can achieve this?

What is the benefit of SD-WAN on-ramp deployment with FortiSASE?

Which two settings are automatically pushed from FortiSASE to FortiClient in a new FortiSASE deployment with default settings? (Choose two.)

Refer to the exhibits. Jumpbox and Windows-AD are endpoints from the same remote location. Jumpbox can access the internet through FortiSASE, while Windows-AD can no longer access...

Which description of the FortiSASE inline-CASB component is true?

Which authentication method overrides any other previously configured user authentication on FortiSASE?

What are two advantages of using zero-trust tags? (Choose two.)

Which FortiSASE feature ensures least-privileged user access to corporate applications that are protected by an on-premises FortiGate device?

A company must provide access to a web server through FortiSASE secure private access for contractors. What is the recommended method to provide access?

Your FortiSASE customer has a small branch office in which ten users will be using their personal laptops and mobile devices to access the internet. Which deployment should they us...

Which information does FortiSASE use to bring network lockdown into effect on an endpoint?

For monitoring potentially unwanted applications on endpoints, which information is available on the FortiSASE software installations page?

What is the recommended method to upgrade FortiClient in a FortiSASE deployment?

Which two are required to enable central management on FortiSASE? (Choose two.)

Which FortiSASE component protects users from online threats by hosting their browsing sessions on a remote container within a secure environment?

What are two benefits of deploying FortiSASE with FortiGate ZTNA access proxy? (Choose two.)

In a FortiSASE SD-WAN deployment with dual hubs, what are two benefits of assigning hubs with different priorities? (Choose two.)

Refer to the exhibits. Antivirus is installed on a Windows 10 endpoint, but the windows application firewall is stopping it from running. What will the endpoint security posture ch...

What can be configured on FortiSASE as an additional layer of security for FortiClient registration?

Which statement best describes the Digital Experience Monitor (DEM) feature on FortiSASE?

In which two ways does FortiSASE help organizations ensure secure access for remote workers? (Choose two.)

How does FortiSASE hide user information when viewing and analyzing logs?

How do security profile group objects behave when central management is enabled on FortiSASE?

A customer wants to upgrade their legacy on-premises proxy to a cloud-based proxy for a hybrid network. Which two FortiSASE features would help the customer achieve this outcome? (...

Refer to the exhibits. A FortiSASE administrator has configured FortiSASE as a spoke to a FortiGate hub. The tunnel is up to the FortiGate hub. However, the remote FortiClient is n...

Which two purposes is the dedicated IP address used for in a FortiSASE deployment? (Choose two.)

How can digital experience monitoring (DEM) on an endpoint assist in diagnosing connectivity and network issues?

Refer to the exhibit. While reviewing the traffic logs, the FortiSASE administrator notices that the usernames are showing random characters. Why are the usernames showing random c...

A customer wants to ensure secure access for private applications for their users by replacing their VPN. Which two SASE technologies can you use to accomplish this task? (Choose t...

Which secure internet access (SIA) use case minimizes individual endpoint configuration?

Which service is included in a secure access service edge (SASE) solution, but not in a security service edge (SSE) solution?

Which two additional features does FortiClient integration provide with FortiSASE, when compared to secure web gateway (SWG) deployment? (Choose two.)

An organization must block user attempts to log in to non-company resources while using Microsoft Office 365 to prevent users from accessing unapproved cloud resources. Which Forti...

Refer to the exhibit. A customer needs to implement device posture checks for their remote endpoints while accessing the protected server. They also want the TCP traffic between th...

Refer to the exhibit. An organization must inspect all the endpoint internet traffic on FortiSASE, and exclude Google Maps traffic from the FortiSASE VPN tunnel and redirect it to...

What happens to the logs on FortiSASE that are older than the configured log retention period?

What is required to enable the MSSP feature on FortiSASE?

When accessing the FortiSASE portal for the first time, an administrator must select data center locations for which three FortiSASE components? (Choose three.)

Which statement applies to a single sign-on (SSO) deployment on FortiSASE?

What are two benefits of deploying secure private access with SD-WAN? (Choose two.)

Refer to the exhibits. How will the application vulnerabilities be patched, based on the exhibits provided?

Which two of the following can release the network lockdown on the endpoint applied by FortiSASE? (Choose two.)

Your organization is currently using FortiSASE for its cybersecurity. They have recently hired a contractor who will work from the HQ office and who needs temporary internet access...

Refer to the exhibit. The daily report for application usage for internet traffic shows an unusually high number of unknown applications by category. What are two possible explanat...

To complete their day-to-day operations, remote users require access to a TCP-based application that is hosted on a private web server. Which FortiSASE deployment use case provides...

Which secure internet access (SIA) use case minimizes individual workstation or device setup, because you do not need to install FortiClient on endpoints or configure explicit web...

Which two advantages does FortiSASE bring to businesses with multiple branch offices? (Choose two.)

During FortiSASE provisioning, how many security points of presence (POPs) need to be configured by the FortiSASE administrator?

In the Secure Private Access (SPA) use case, which two FortiSASE features facilitate access to corporate applications? (Choose two.)

Which two components are part of onboarding a secure web gateway (SWG) endpoint for secure internet access (SIA)? (Choose two.)