Fortinet FCSS_SASE_AD-23 Quiz 1 Topic 3 Questions 1-5

Question: 1

Which two deployment methods are used to connect a FortiExtender as a FortiSASE LAN extension? (Choose two.)

AConnect FortiExtender to FortiSASE using FortiZTP

BEnable Control and Provisioning Wireless Access Points (CAPWAP) access on the FortiSASE portal.

CEnter the FortiSASE domain name in the FortiExtender GUI as a static discovery server

DConfigure an IPsec tunnel on FortiSASE to connect to FortiExtender.

Show Answer

Question: 2

Refer to the exhibit.

q2_FCSS_SASE_AD-23

The daily report for application usage shows an unusually high number of unknown applications by category.

What are two possible explanations for this? (Choose two.)

ACertificate inspection is not being used to scan application traffic.

BThe inline-CASB application control profile does not have application categories set to Monitor

CZero trust network access (ZTNA) tags are not being used to tag the correct users.

DDeep inspection is not being used to scan traffic.

Show Answer

Question: 3

Which two components are part of onboarding a secure web gateway (SWG) endpoint? (Choose two)

AFortiSASE CA certificate

Bproxy auto-configuration (PAC) file

CFortiSASE invitation code

DFortiClient installer

Show Answer

Question: 4

Refer to the exhibit.

q4_FCSS_SASE_AD-23

A company has a requirement to inspect all the endpoint internet traffic on FortiSASE, and exclude Google Maps traffic from the FortiSASE VPN tunnel and redirect it to the endpoint physical Interface.

Which configuration must you apply to achieve this requirement?

AExempt the Google Maps FQDN from the endpoint system proxy settings.

BConfigure a static route with the Google Maps FQDN on the endpoint to redirect traffic

CConfigure the Google Maps FQDN as a split tunneling destination on the FortiSASE endpoint profile.

DChange the default DNS server configuration on FortiSASE to use the endpoint system DNS.

Show Answer

Question: 5

What are two advantages of using zero-trust tags? (Choose two.)

AZero-trust tags can be used to allow or deny access to network resources

BZero-trust tags can determine the security posture of an endpoint.

CZero-trust tags can be used to create multiple endpoint profiles which can be applied to different endpoints

DZero-trust tags can be used to allow secure web gateway (SWG) access

Show Answer

Fortinet FCSS_SASE_AD-23 Quiz:1 Topic:3 Questions:1-5