Free FCSS – FortiSASE 24 Administrator Exam FCSS_SASE_AD-24 Exam Practice Test

A customer wants to upgrade their legacy on-premises proxy to a could-based proxy for a hybrid network. Which FortiSASE features would help the customer to achieve this outcome?

• SD-WAN and NGFW
• SD-WAN and inline-CASB
• zero trust network access (ZTNA) and next generation firewall (NGFW)
• secure web gateway (SWG) and inline-CASB

Which secure internet access (SIA) use case minimizes individual workstation or device setup, because you do not need to install FortiClient on endpoints or configure explicit web proxy settings on web browser-based end points?

• SIA for inline-CASB users
• SIA for agentless remote users
• SIA for SSLVPN remote users
• SIA for site-based remote users

A FortiSASE administrator is configuring a Secure Private Access (SPA) solution to share endpoint information with a corporate FortiGate.Which three configuration actions will achieve this solution? (Choose three.)

• Add the FortiGate IP address in the secure private access configuration on FortiSASE.
• Use the FortiClient EMS cloud connector on the corporate FortiGate to connect to FortiSASE
• Register FortiGate and FortiSASE under the same FortiCloud account.
• Authorize the corporate FortiGate on FortiSASE as a ZTNA access proxy.
• Apply the FortiSASE zero trust network access (ZTNA) license on the corporate FortiGate.

Your organization is currently using FortiSASE for its cybersecurity. They have recently hired a contractor who will work from the HQ office and who needs temporary internet access in order to set up a web-based point of sale (POS) system.What is the recommended way to provide internet access to the contractor?Use FortiClient on the endpoint to manage internet access.Use a proxy auto-configuration (PAC) file and provide secure web gateway (SWG) service as an explicit web proxy.Use zero trust network access (ZTNA) and tag the client as an unmanaged endpoint.Configure a VPN policy on FortiSASE to provide access to the internet.

• Additionally, managing PAC files can be cumbersome and less secure compared to ZTNA.
• D . Configure a VPN policy on FortiSASE to provide access to the internet: Using a VPN policy would grant broader access to the network, which is not ideal for a temporary contractor. It increases the risk of unauthorized access to internal resources and does not align with the principle of least privilege.

An organization wants to block all video and audio application traffic but grant access to videos from CNN Which application override action must you configure in the Application Control with Inline- CASB?

• Allow
• Pass
• Permit
• Exempt

Which of the following describes the FortiSASE inline-CASB component?

• It provides visibility for unmanaged locations and devices.
• It is placed directly in the traffic path between the endpoint and cloud applications.
• It uses API to connect to the cloud applications.
• It detects data at rest.

How does FortiSASE hide user information when viewing and analyzing logs?

• By hashing data using Blowfish
• By hashing data using salt
• By encrypting data using Secure Hash Algorithm 256-bit (SHA-256)
• By encrypting data using advanced encryption standard (AES)

Which event log subtype captures FortiSASE SSL VPN user creation?

• Endpoint Events
• VPN Events
• User Events
• Administrator Events

When viewing the daily summary report generated by FortiSASE, the administrator notices that the report contains very little data.What is a possible explanation for this almost empty report?

• Log allowed traffic is set to Security Events for all policies.
• There are no security profile groups applied to all policies.
• The web filter security profile is not set to Monitor.
• Digital experience monitoring is not configured.

When you configure FortiSASE Secure Private Access (SPA) with SD-WAN integration, you must establish a routing adjacency between FortiSASE and the FortiGate SD-WAN hub. Which routing protocol must you use?

• BGP
• IS-IS
• OSPF
• EIGRP