Free FCSS – FortiSASE 24 Administrator Exam FCSS_SASE_AD-24 Exam Practice Test

A FortiSASE administrator is configuring a Secure Private Access (SPA) solution to share endpoint information with a corporate FortiGate.Which three configuration actions will achieve this solution? (Choose three.)

• Add the FortiGate IP address in the secure private access configuration on FortiSASE.
• Use the FortiClient EMS cloud connector on the corporate FortiGate to connect to FortiSASE
• Register FortiGate and FortiSASE under the same FortiCloud account.
• Authorize the corporate FortiGate on FortiSASE as a ZTNA access proxy.
• Apply the FortiSASE zero trust network access (ZTNA) license on the corporate FortiGate.

When you configure FortiSASE Secure Private Access (SPA) with SD-WAN integration, you must establish a routing adjacency between FortiSASE and the FortiGate SD-WAN hub. Which routing protocol must you use?

• BGP
• IS-IS
• OSPF
• EIGRP

Which two components are part of onboarding a secure web gateway (SWG) endpoint? (Choose two)

• FortiSASE CA certificate
• proxy auto-configuration (PAC) file
• FortiSASE invitation code
• FortiClient installer

In which three ways does FortiSASE help organizations ensure secure access for remote workers? (Choose three.)

• It enforces multi-factor authentication (MFA) to validate remote users.
• It secures traffic from endpoints to cloud applications.
• It uses the identity & access management (IAM) portal to validate the identities of remote workers.
• It offers zero trust network access (ZTNA) capabilities.
• It enforces granular access policies based on user identities.

Which policy type is used to control traffic between the FortiClient endpoint to FortiSASE for secure internet access?

• VPN policy
• thin edge policy
• private access policy
• secure web gateway (SWG) policy

Your organization is currently using FortiSASE for its cybersecurity. They have recently hired a contractor who will work from the HQ office and who needs temporary internet access in order to set up a web-based point of sale (POS) system.What is the recommended way to provide internet access to the contractor?Use FortiClient on the endpoint to manage internet access.Use a proxy auto-configuration (PAC) file and provide secure web gateway (SWG) service as an explicit web proxy.Use zero trust network access (ZTNA) and tag the client as an unmanaged endpoint.Configure a VPN policy on FortiSASE to provide access to the internet.

• Additionally, managing PAC files can be cumbersome and less secure compared to ZTNA.
• D . Configure a VPN policy on FortiSASE to provide access to the internet: Using a VPN policy would grant broader access to the network, which is not ideal for a temporary contractor. It increases the risk of unauthorized access to internal resources and does not align with the principle of least privilege.

Which two advantages does FortiSASE bring to businesses with multiple branch offices? (Choose two.)

• It offers centralized management for simplified administration.
• It enables seamless integration with third-party firewalls.
• it offers customizable dashboard views for each branch location
• It eliminates the need to have an on-premises firewall for each branch.

A customer needs to implement device posture checks for their remote endpoints while accessing the protected server. They also want the TCP traffic between the remote endpoints and the protected servers to be processed by FortiGate.In this scenario, which three setups will achieve the above requirements? (Choose three.)Configure ZTNA tags on FortiGate.Configure FortiGate as a zero trust network access (ZTNA) access proxy.Configure ZTNA servers and ZTNA policies on FortiGate.Configure private access policies on FortiSASE with ZTN

• Sync ZTNA tags from FortiSASE to FortiGate.

Which statement applies to a single sign-on (SSO) deployment on FortiSASE?

• SSO overrides any other previously configured user authentication.
• SSO identity providers can be integrated using public and private access types.
• SSO is recommended only for agent-based deployments.
• SSO users can be imported into FortiSASE and added to user groups.

Which role does FortiSASE play in supporting zero trust network access (ZTNA) principles9

• It offers hardware-based firewalls for network segmentation.
• It integrates with software-defined network (SDN) solutions.
• It can identify attributes on the endpoint for security posture check.
• It enables VPN connections for remote employees.