Big Halloween Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

FCSS_SASE_AD-25 Premium Exam Questions

FCSS - FortiSASE 25 Administrator Questions and Answers

Question 9

What can be configured on FortiSASE as an additional layer of security for FortiClient registration?

Options:

A.

security posture tags

B.

application inventory

C.

user verification

D.

device identification

Question 10

Refer to the exhibits.

Jumpbox and Windows-AD are endpoints from the same remote location. Jumpbox can access the internet through FortiSASE, while Windows-AD can no longer access the internet.

Based on the information in the exhibits, which reason explains the outage on Windows-AD?

Options:

A.

Windows-AD is excluded from FortiSASE management.

B.

The FortiClient version installed on Windows AD does not match the expected version on FortiSASE.

C.

The device posture for Windows-AD has changed.

D.

The remote VPN user on Windows-AD no longer matches any VPN policy.

Question 11

Refer to the exhibits.

A FortiSASE administrator has configured FortiSASE as a spoke to a FortiGate hub. The tunnel is up to the FortiGate hub. However, the remote FortiClient is not able to access the web server hosted behind the FortiGate hub.

Based on the exhibits, what is the reason for the access failure?

Options:

A.

A private access policy has denied the traffic because of failed compliance

B.

The hub is not advertising the required routes.

C.

The hub firewall policy does not include the FortiClient address range.

D.

The server subnet BGP route was not received on FortiSASE.

Question 12

Which information does FortiSASE use to bring network lockdown into effect on an endpoint?

Options:

A.

Zero-day malware detection on endpoint

B.

The number of critical vulnerabilities detected on the endpoint

C.

The security posture of the endpoint based on ZTNA tags

D.

The connection status of the tunnel to FortiSASE