CertsTopics Logo

Weekend Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

Fortinet Certified Solution Specialist FCSS_SASE_AD-24 Exam Dumps

Page: 2 / 3
Total 44 questions
Get FCSS_SASE_AD-24 Full Access Download FCSS_SASE_AD-24 PDF

FCSS - FortiSASE 24 Administrator Questions and Answers

Question 5

Which statement applies to a single sign-on (SSO) deployment on FortiSASE?

Options:

A.

SSO overrides any other previously configured user authentication.

B.

SSO identity providers can be integrated using public and private access types.

C.

SSO is recommended only for agent-based deployments.

D.

SSO users can be imported into FortiSASE and added to user groups.

Question 6

Which two deployment methods are used to connect a FortiExtender as a FortiSASE LAN extension? (Choose two.)

Options:

A.

Connect FortiExtender to FortiSASE using FortiZTP

B.

Enable Control and Provisioning Wireless Access Points (CAPWAP) access on the FortiSASE portal.

C.

Enter the FortiSASE domain name in the FortiExtender GUI as a static discovery server

D.

Configure an IPsec tunnel on FortiSASE to connect to FortiExtender.

Question 7

What are two requirements to enable the MSSP feature on FortiSASE? (Choose two.)

Options:

A.

Add FortiCloud premium subscription on the root FortiCloud account.

B.

Configure MSSP user accounts and permissions on the FortiSASE portal.

C.

Assign role-based access control (RBAC) to IAM users using FortiCloud IAM portal.

D.

Enable multi-tenancy on the FortiSASE portal.

Question 8

Refer to the exhibits.

A FortiSASE administrator is trying to configure FortiSASE as a spoke to a FortiGate hub. The tunnel is up to the FortiGale hub. However, the administrator is not able to ping the webserver hosted behind the FortiGate hub.

Based on the output, what is the reason for the ping failures?

Options:

A.

The Secure Private Access (SPA) policy needs to allow PING service.

B.

Quick mode selectors are restricting the subnet.

C.

The BGP route is not received.

D.

Network address translation (NAT) is not enabled on the spoke-to-hub policy.

Page: 2 / 3
Total 44 questions
Get FCSS_SASE_AD-24 Full Access Download FCSS_SASE_AD-24 PDF