PDF (New 2024) Actual Fortinet FCSS_SASE_AD-23 Exam Questions [Q18-Q34]

Rate this post

PDF (New 2024) Actual Fortinet FCSS_SASE_AD-23 Exam Questions

Dumps Moneyack Guarantee – FCSS_SASE_AD-23 Dumps UpTo 90% Off

Q18. Refer to the exhibits.

A FortiSASE administrator has configured an antivirus profile in the security profile group and applied it to the internet access policy. Remote users are still able to download the eicar.com-zip file from https://eicar.org.
Traffic logs show traffic is allowed by the policy.
Which configuration on FortiSASE is allowing users to perform the download?

Web filter is allowing the traffic.

IPS is disabled in the security profile group.

The HTTPS protocol is not enabled in the antivirus profile.

Force certificate inspection is enabled in the policy.

Q19. How does FortiSASE hide user information when viewing and analyzing logs?

By hashing data using Blowfish

By hashing data using salt

By encrypting data using Secure Hash Algorithm 256-bit (SHA-256)

By encrypting data using advanced encryption standard (AES)

Q20. An organization wants to block all video and audio application traffic but grant access to videos from CNN Which application override action must you configure in the Application Control with Inline-CASB?

Allow

Pass

Permit

Exempt

Q21. During FortiSASE provisioning, how many security points of presence (POPs) need to be configured by the FortiSASE administrator?

Q22. When accessing the FortiSASE portal for the first time, an administrator must select data center locations for which three FortiSASE components? (Choose three.)

Endpoint management

Points of presence

SD-WAN hub

Logging

Authentication

Q23. When you configure FortiSASE Secure Private Access (SPA) with SD-WAN integration, you must establish a routing adjacency between FortiSASE and the FortiGate SD-WAN hub. Which routing protocol must you use?

BGP

IS-IS

OSPF

EIGRP

Q24. Which two advantages does FortiSASE bring to businesses with multiple branch offices? (Choose two.)

It offers centralized management for simplified administration.

It enables seamless integration with third-party firewalls.

it offers customizable dashboard views for each branch location

It eliminates the need to have an on-premises firewall for eachbranch.

Q25. What are two advantages of using zero-trust tags? (Choose two.)

Zero-trust tags can be used to allow or deny access to network resources

Zero-trust tags can determine the security posture of an endpoint.

Zero-trust tags can be used to create multiple endpoint profiles which can be applied to different endpoints

Zero-trust tags can be used to allow secure web gateway (SWG) access

Q26. A FortiSASE administrator is configuring a Secure Private Access (SPA) solution to share endpoint information with a corporate FortiGate.
Which three configuration actions will achieve this solution? (Choose three.)

Add the FortiGate IP address in the secure private access configuration on FortiSASE.

Use the FortiClient EMS cloud connector on the corporate FortiGate to connect to FortiSASE

Authorize the corporate FortiGate on FortiSASE as a ZTNA access proxy.

Apply the FortiSASE zero trust network access (ZTNA) license on the corporate FortiGate.

Q27. Which secure internet access (SIA) use case minimizes individual workstation or device setup, because you do not needto install FortiClient on endpoints or configure explicit web proxy settings on web browser-based end points?

SIA for inline-CASB users

SIA for agentless remote users

SIA for SSLVPN remote users

SIA for site-based remote users

Q28. Refer to the exhibits.

A FortiSASE administrator is trying to configure FortiSASE as a spoke to a FortiGate hub. The tunnel is up to the FortiGale hub. However, the administrator is not able to ping the webserver hosted behind the FortiGate hub.
Based on the output, what is the reason for the ping failures?

The Secure Private Access (SPA) policy needs to allow PING service.

Quick mode selectors are restricting the subnet.

The BGP route is not received.

Network address translation (NAT) is not enabled on the spoke-to-hub policy.

Q29. Refer to the exhibits.

WiMO-Pro and Win7-Pro are endpoints from the same remote location. WiMO-Pro can access the internet though FortiSASE, while Wm7-Pro can no longer access the internet Given the exhibits, which reason explains the outage on Wm7-Pro?

The Win7-Pro device posture has changed.

Win7-Pro cannot reach the FortiSASE SSL VPN gateway

The Win7-Pro FortiClient version does not match the FortiSASE endpoint requirement.

Win-7 Pro has exceeded the total vulnerability detected threshold.

Q30. Refer to the exhibits.

When remote users connected to FortiSASE require access to internal resources on Branch-2. how will traffic be routed?

FortiSASE will use the SD-WAN capability and determine that traffic will be directed to HUB-2. which will then route traffic to Branch-2.

FortiSASE will use the AD VPN protocol and determine that traffic will be directed to Branch-2 directly, using a static route

FortiSASE will use the SD-WAN capability and determine that traffic will be directed to HUB-1, which will then route traffic to Branch-2.

FortiSASE will use the AD VPN protocol and determine that traffic will be directed to Branch-2 directly, using a dynamic route

Fortinet FCSS_SASE_AD-23 Exam Syllabus Topics:

Topic	Details
Topic 1	Analytics: In this section, the focus is given to identifying potential security threats using FortiSASE logs, configuring dashboards, FortiView and logging settings, and analyzing reports for user traffic and security issues.
Topic 2	SASE architecture and components: In this section, the focus is on integrating FortiSASE in a hybrid network, identifying FortiSASE components, and constructing FortiSASE deployment cases.
Topic 3	SASE deployment: In this section, the focus is given to implementing various types of user onboarding methods, configuring SASE administration settings, and setting up security posture checks and compliance rules.
Topic 4	SIA, SSA, and SPA: In this section, the focus is given to the design of security profiles to perform content inspection, and implement SD-WAN using FortiSASE, and ZTNA.