Free FCSS – FortiSASE 23 Administrator Exam FCSS_SASE_AD-23 Exam Practice Test

A FortiSASE administrator is configuring a Secure Private Access (SPA) solution to share endpoint information with a corporate FortiGate.Which three configuration actions will achieve this solution? (Choose three.)

• Add the FortiGate IP address in the secure private access configuration on FortiSASE.
• Use the FortiClient EMS cloud connector on the corporate FortiGate to connect to FortiSASE
• Register FortiGate and FortiSASE under the same FortiCloud account.
• Authorize the corporate FortiGate on FortiSASE as a ZTNA access proxy.
• Apply the FortiSASE zero trust network access (ZTNA) license on the corporate FortiGate.

To complete their day-to-day operations, remote users require access to a TCP-based application that is hosted on a private web server. Which FortiSASE deployment use case provides the most efficient and secure method for meeting the remote users' requirements?

• SD-WAN private access
• inline-CASB
• zero trust network access (ZTNA) private access
• next generation firewall (NGFW)

Which policy type is used to control traffic between the FortiClient endpoint to FortiSASE for secure internet access?

• VPN policy
• thin edge policy
• private access policy
• secure web gateway (SWG) policy

Which secure internet access (SIA) use case minimizes individual workstation or device setup, because you do not need to install FortiClient on endpoints or configure explicit web proxy settings on web browser-based end points?

• SIA for inline-CASB users
• SIA for agentless remote users
• SIA for SSLVPN remote users
• SIA for site-based remote users

What are two advantages of using zero-trust tags? (Choose two.)

• Zero-trust tags can be used to allow or deny access to network resources
• Zero-trust tags can determine the security posture of an endpoint.
• Zero-trust tags can be used to create multiple endpoint profiles which can be applied to different endpoints
• Zero-trust tags can be used to allow secure web gateway (SWG) access

Which two advantages does FortiSASE bring to businesses with multiple branch offices? (Choose two.)

• It offers centralized management for simplified administration.
• It enables seamless integration with third-party firewalls.
• it offers customizable dashboard views for each branch location
• It eliminates the need to have an on-premises firewall for each branch.

Which two deployment methods are used to connect a FortiExtender as a FortiSASE LAN extension? (Choose two.)

• Connect FortiExtender to FortiSASE using FortiZTP
• Enable Control and Provisioning Wireless Access Points (CAPWAP) access on the FortiSASE portal.
• Enter the FortiSASE domain name in the FortiExtender GUI as a static discovery server
• Configure an IPsec tunnel on FortiSASE to connect to FortiExtender.

When deploying FortiSASE agent-based clients, which three features are available compared to an agentless solution? (Choose three.)

• Vulnerability scan
• SSL inspection
• Anti-ransomware protection
• Web filter
• ZTNA tags

Which two additional components does FortiSASE use for application control to act as an inline- CASB? (Choose two.)

• intrusion prevention system (IPS)
• SSL deep inspection
• DNS filter
• Web filter with inline-CASB

When you configure FortiSASE Secure Private Access (SPA) with SD-WAN integration, you must establish a routing adjacency between FortiSASE and the FortiGate SD-WAN hub. Which routing protocol must you use?

• BGP
• IS-IS
• OSPF
• EIGRP