FCSS - FortiSASE 25 Administrator - FCSS_SASE

Question 1

Which two purposes is the dedicated IP address used for in a FortiSASE deployment? (Choose two.)

A. For regulatory compliance

B. For user access control to FortiSASE

C. For allocation and assignment of unique IP addresses to remote users

D. For isolation and identification

Correct Answer: A,D

Question 2

Refer to the exhibits.

Antivirus is installed on a Windows 10 endpoint, but the windows application firewall is stopping it from running.
What will the endpoint security posture check be?

A. FortiClient will trigger network lockdown on the endpoint.

B. FortiClient will be unmanaged from FortiSASE due to failed compliance.

C. FortiClient will tag the endpoint as FortiSASE-Non-Compliant.

D. FortiClient will prompt the user to enable antivirus.

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

Which two are required to enable central management on FortiSASE? (Choose two.)

A. FortiManager and FortiSASE registered under the same FortiCloud account.

B. FortiSASE connector configured on FortiManager.

C. FortiSASE central management entitlement applied to FortiManager.

D. The FortiManager IP address in the FortiSASE central management configuration.

Correct Answer: A,C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

A customer wants to ensure secure access for private applications for their users by replacing their VPN.
Which two SASE technologies can you use to accomplish this task? (Choose two.)

A. secure web gateway (SWG) and cloud access security broker (CASB)

B. secure SD-WAN

C. zero trust network access (ZTNA)

D. SD-WAN on-ramp

Correct Answer: C,D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

Refer to the exhibit.

The daily report for application usage for internet traffic shows an unusually high number of unknown applications by category.
What are two possible explanations for this? (Choose two.)

A. The private access policy must be to set to log Security Events.

B. Deep inspection is not being used to scan traffic.

C. Certificate inspection is not being used to scan application traffic.

D. The inline-CASB application control profile does not have application categories set to Monitor.

Correct Answer: B,D

Question 6

Refer to the exhibits.

A FortiSASE administrator has configured FortiSASE as a spoke to a FortiGate hub. The tunnel is up to the FortiGate hub. However, the remote FortiClient is not able to access the web server hosted behind the FortiGate hub.
Based on the exhibits, what is the reason for the access failure?

A. A private access policy has denied the traffic because of failed compliance

B. The server subnet BGP route was not received on FortiSASE.

C. The hub is not advertising the required routes.

D. The hub firewall policy does not include the FortiClient address range.

Correct Answer: D

Fortinet FCSS - FortiSASE 25 Administrator - FCSS_SASE_AD-25 Exam Practice Test

Latest Update

Useful Links

Contact Us