Free FCSS – FortiSASE 23 Administrator Exam FCSS_SASE_AD-23 Exam Practice Test

To complete their day-to-day operations, remote users require access to a TCP-based application that is hosted on a private web server. Which FortiSASE deployment use case provides the most efficient and secure method for meeting the remote users' requirements?

• SD-WAN private access
• inline-CASB
• zero trust network access (ZTNA) private access
• next generation firewall (NGFW)

What are two advantages of using zero-trust tags? (Choose two.)

• Zero-trust tags can be used to allow or deny access to network resources
• Zero-trust tags can determine the security posture of an endpoint.
• Zero-trust tags can be used to create multiple endpoint profiles which can be applied to different endpoints
• Zero-trust tags can be used to allow secure web gateway (SWG) access

A FortiSASE administrator is configuring a Secure Private Access (SPA) solution to share endpoint information with a corporate FortiGate.Which three configuration actions will achieve this solution? (Choose three.)

• Add the FortiGate IP address in the secure private access configuration on FortiSASE.
• Use the FortiClient EMS cloud connector on the corporate FortiGate to connect to FortiSASE
• Register FortiGate and FortiSASE under the same FortiCloud account.
• Authorize the corporate FortiGate on FortiSASE as a ZTNA access proxy.
• Apply the FortiSASE zero trust network access (ZTNA) license on the corporate FortiGate.

Which two advantages does FortiSASE bring to businesses with multiple branch offices? (Choose two.)

• It offers centralized management for simplified administration.
• It enables seamless integration with third-party firewalls.
• it offers customizable dashboard views for each branch location
• It eliminates the need to have an on-premises firewall for each branch.

During FortiSASE provisioning, how many security points of presence (POPs) need to be configured by the FortiSASE administrator?

• 3
• 4
• 2
• 1

When viewing the daily summary report generated by FortiSASE. the administrator notices that the report contains very little data. What is a possible explanation for this almost empty report?

• Digital experience monitoring is not configured.
• Log allowed traffic is set to Security Events for all policies.
• The web filter security profile is not set to Monitor
• There are no security profile group applied to all policies.

Which two deployment methods are used to connect a FortiExtender as a FortiSASE LAN extension? (Choose two.)

• Connect FortiExtender to FortiSASE using FortiZTP
• Enable Control and Provisioning Wireless Access Points (CAPWAP) access on the FortiSASE portal.
• Enter the FortiSASE domain name in the FortiExtender GUI as a static discovery server
• Configure an IPsec tunnel on FortiSASE to connect to FortiExtender.

When deploying FortiSASE agent-based clients, which three features are available compared to an agentless solution? (Choose three.)

• Vulnerability scan
• SSL inspection
• Anti-ransomware protection
• Web filter
• ZTNA tags

Which two components are part of onboarding a secure web gateway (SWG) endpoint? (Choose two)

• FortiSASE CA certificate
• proxy auto-configuration (PAC) file
• FortiSASE invitation code
• FortiClient installer

An organization needs to resolve internal hostnames using its internal rather than public DNS servers for remotely connected endpoints. Which two components must be configured on FortiSASE to achieve this? (Choose two.)

• SSL deep inspection
• Split DNS rules
• Split tunnelling destinations
• DNS filter