Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
Fortinet
Fortinet Certified Solution Specialist
FCSS_SASE_AD-24
FCSS - FortiSASE 24 Administrator Questions and Answers

Pass the Fortinet Certified Solution Specialist FCSS_SASE_AD-24 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam FCSS_SASE_AD-24 Premium Access

View all detail and faqs for the FCSS_SASE_AD-24 exam

Go to Exam

661 Students Passed

94% Average Score

98% Same Questions

Viewing page 2 out of 2 pages

Viewing questions 11-20 out of questions

Questions # 11:

In a FortiSASE secure web gateway (SWG) deployment, which three features protect against web-based threats? (Choose three J

Options:

Intrusion prevention system (IPS) for web traffic

SSL deep inspection for encrypted web traffic

Malware protection with sandboxing capabilities

Data loss prevention (DLP) for web traffic

Web application firewall (WAF) for web applications

Answer

A, B, D

Questions # 12:

Which two settings are automatically pushed from FortiSASE to FortiClient in a FortiSASE deployment with default settings? (Choose two.)

Options:

ZTNA tags

Real-time protection

SSL VPN profile

FortiSASE CA certificate

Answer

B, C

Questions # 13:

Refer to the exhibit.

Question # 13

Based on the configuration shown, in which two ways will FortiSASE process sessions that require FortiSandbox inspection? (Choose two.)

Options:

All infected files that FortiSandbox detects as malicious will be quarantined.

Only endpoints assigned with profile for Sandbox Detection will be processed by the sandbox feature.

All files detected on a LSE drive will be sent to FortiSandbox for analysis

All infected files will be sent to a on-premises FortiSandbox for inspection

Answer

A, C

Questions # 14:

Which role does FortiSASE play in supporting zero trust network access (ZTNA) principles9

Options:

It offers hardware-based firewalls for network segmentation.

It integrates with software-defined network (SDN) solutions.

It can identify attributes on the endpoint for security posture check.

It enables VPN connections for remote employees.

Answer

Explanation

FortiSASE supports zero trust network access (ZTNA) principles by identifying attributes on the endpoint for security posture checks. ZTNA principles require continuous verification of user and device credentials, as well as their security posture, before granting access to network resources.

Security Posture Check:

FortiSASE can evaluate the security posture of endpoints by checking for compliance with security policies, such as antivirus status, patch levels, and configuration settings.

This ensures that only compliant and secure devices are granted access to the network.

Zero Trust Network Access (ZTNA):

ZTNA is based on the principle of "never trust, always verify," which requires continuous assessment of user and device trustworthiness.

FortiSASE plays a crucial role in implementing ZTNA by performing these security posture checks and enforcing access control policies.

[References:, FortiOS 7.2 Administration Guide: Provides information on ZTNA and endpoint security posture checks., FortiSASE 23.2 Documentation: Details on how FortiSASE implements ZTNA principles., , ]

Questions # 15:

Refer to the exhibit.

Question # 15

A company has a requirement to inspect all the endpoint internet traffic on FortiSASE, and exclude Google Maps traffic from the FortiSASE VPN tunnel and redirect it to the endpoint physical Interface.

Which configuration must you apply to achieve this requirement?

Options:

Exempt the Google Maps FQDN from the endpoint system proxy settings.

Configure a static route with the Google Maps FQDN on the endpoint to redirect traffic

Configure the Google Maps FQDN as a split tunneling destination on the FortiSASE endpoint profile.

Change the default DNS server configuration on FortiSASE to use the endpoint system DNS.

Answer

Explanation

To meet the requirement of inspecting all endpoint internet traffic on FortiSASE while excluding Google Maps traffic from the FortiSASE VPN tunnel and redirecting it to the endpoint's physical interface, you should configure split tunneling. Split tunneling allows specific traffic to bypass the VPN tunnel and be routed directly through the endpoint's local interface.

Split Tunneling Configuration:

Split tunneling enables selective traffic to be routed outside the VPN tunnel.

By configuring the Google Maps Fully Qualified Domain Name (FQDN) as a split tunneling destination, you ensure that traffic to Google Maps bypasses the VPN tunnel and uses the endpoint's local interface instead.

Implementation Steps:

Access the FortiSASE endpoint profile configuration.

Add the Google Maps FQDN to the split tunneling destinations list.

This configuration directs traffic intended for Google Maps to bypass the VPN tunnel and be routed directly through the endpoint's physical network interface.

[References:, FortiOS 7.2 Administration Guide: Provides details on split tunneling configuration., FortiSASE 23.2 Documentation: Explains how to set up and manage split tunneling for specific destinations., , ]

Questions # 16:

You are designing a new network for Company X and one of the new cybersecurity policy requirements is that all remote user endpoints must always be connected and protected Which FortiSASE component facilitates this always-on security measure?

Options:

site-based deployment

thin-branch SASE extension

unified FortiClient

inline-CASB

Answer

Explanation

The unified FortiClient component of FortiSASE facilitates the always-on security measure required for ensuring that all remote user endpoints are always connected and protected.

Unified FortiClient:

FortiClient is a comprehensive endpoint security solution that integrates with FortiSASE to provide continuous protection for remote user endpoints.

It ensures that endpoints are always connected to the FortiSASE infrastructure, even when users are off the corporate network.

Always-On Security:

The unified FortiClient maintains a persistent connection to FortiSASE, enforcing security policies and protecting endpoints against threats at all times.

This ensures compliance with the cybersecurity policy requiring constant connectivity and protection for remote users.

[References:, FortiOS 7.2 Administration Guide: Provides information on configuring and managing FortiClient for endpoint security., FortiSASE 23.2 Documentation: Explains how FortiClient integrates with FortiSASE to deliver always-on security for remote endpoints., , ]

Viewing page 2 out of 2 pages

Viewing questions 11-20 out of questions