VCEdump

FCSS_SASE_AD-25 FCSS - FortiSASE 25 Administrator

PDF question preview Back to product

Free preview

8 sample questions

The complete product contains 51 questions.

Question formats

Single choice4

Multiple choice4

Compare study plans

Fortinet · FCSS_SASE_AD-25

FCSS_SASE_AD-25 questions and answers

Review the question wording, option layout, and available explanations before choosing a study plan.

Question 1

Single choice

How do security profile group objects behave when central management is enabled on FortiSASE?

A
Objects support two-way synchronization.
B
Objects created on FortiSASE can be retrieved on FortiManager.
C
Objects that are only flow-based are supported.
D
Objects are considered read-only on FortiSASE.

Question 2

Single choice

Refer to the exhibits.

Antivirus is installed on a Windows 10 endpoint, but the windows application firewall is stopping it from running.

What will the endpoint security posture check be?

A
FortiClient will tag the endpoint as FortiSASE-Non-Compliant.
B
FortiClient will be unmanaged from FortiSASE due to failed compliance.
C
FortiClient will trigger network lockdown on the endpoint.
D
FortiClient will prompt the user to enable antivirus.

Question 3

Multiple choice

Which two settings are automatically pushed from FortiSASE to FortiClient in a new FortiSASE deployment with default settings? (Choose two.)

A
zero trust network access (ZTNA) tags
B
tunnel profile
C
FortiSASE certificate authority (CA) certificate
D
real-time protection

Question 4

Single choice

An organization must block user attempts to log in to non-company resources while using Microsoft Office 365 to prevent users from accessing unapproved cloud resources.

Which FortiSASE feature can you implement to meet this requirement?

A
application control with inline-CASB
B
data loss prevention (DLP) with Microsoft Purview Information Protection (MPIP)
C
web filter with inline-CASB
D
DNS filter with domain filter

Question 5

Multiple choice

Which two of the following can release the network lockdown on the endpoint applied by FortiSASE? (Choose two.)\

A
When the endpoint connects to the FortiSASE tunnel
B
When the endpoint is determined as on-net
C
When the endpoint is rebooted
D
When the endpoint is determined as compliant using ZTNA tags

Question 6

Multiple choice

Refer to the exhibit.

Based on the configuration shown, in which two ways will FortiSASE process sessions that require FortiSandbox inspection? (Choose two.)

A
Only endpoints assigned a profile for sandbox detection will be processed by the sandbox feature.
B
FortiClient quarantines only infected files that FortiSandbox detects as medium level.
C
All files executed on a USB drive will be sent to FortiSandbox for analysis.
D
All files will be sent to a on-premises FortiSandbox for inspection.

Question 7

Multiple choice

What are two benefits of deploying FortiSASE with FortiGate ZTNA access proxy? (Choose two.)

A
It offers data center redundancy.
B
The on-premises FortiGate performs a device posture check.
C
It is ideal for latency-sensitive applications.
D
It supports both agentless ZTNA and agent-based ZTNA.

Question 8

Single choice

Which statement best describes the Digital Experience Monitor (DEM) feature on FortiSASE?

A
It provides end-to-end network visibility from all the FortiSASE security PoPs to a specific SaaS application.
B
It gathers all the vulnerability information from all the FortiClient endpoints.
C
It is used for performing device compliance checks on endpoints.
D
It monitors the FortiSASE POP health based on ping probes.