FCSS-SASE Practice Questions & Answers • ExamPrepare

15 questions in this view

Page 1 of 3

Question 1

Refer to the exhibits.

Win10-Pro and Win7-Pro are endpoints from the same remote location. Win10-Pro can access the internet though FortiSASE, while Win7-Pro can no longer access the internet.

Given the exhibits, which reason explains the outage on Win7-Pro?

The Win7-Pro device posture has changed.
The Win7-Pro FortiClient version does not match the FortiSASE endpoint requirement.
Win7-Pro is disconnected from FortiClient telemetry.
Win-7 Pro has exceeded the total vulnerability detected threshold.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

Your organization is currently using FortiSASE for its cybersecurity. They have recently hired a contractor who will work from the HQ office and who needs temporary internet access in order to set up a web-based point of sale (POS) system.

What is the recommended way to provide internet access to the contractor?

Use a proxy auto-configuration (PAC) file and provide secure web gateway (SWG) service as an explicit web proxy.
Use FortiClient on the endpoint to manage internet access.
Use zero trust network access (ZTNA) and tag the client as an unmanaged endpoint.
Configure a VPN policy on FortiSASE to provide access to the internet.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

A FortiSASE administrator is configuring a Secure Private Access (SPA) solution to share endpoint information with a corporate FortiGate.

Which three configuration actions will achieve this solution? (Choose three.)

Register FortiGate and FortiSASE under the same FortiCloud account.
Add the FortiGate IP address in the secure private access configuration on FortiSASE.
Apply the FortiSASE zero trust network access (ZTNA) license on the corporate FortiGate.
Use the FortiClient EMS cloud connector on the corporate FortiGate to connect to FortiSASE.
Authorize the corporate FortiGate on FortiSASE as a ZTNA access proxy.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

Refer to the exhibits.

A FortiSASE administrator is trying to configure FortiSASE as a spoke to a FortiGate hub. The tunnel is up to the FortiGate hub. However, the administrator is not able to ping the webserver hosted behind the FortiGate hub.

Based on the output, what is the reason for the ping failures?

Network diagram

VPN tunnel diagnose output on FortiGate Hub

Secure Private Access policy on FortiSASE

BGP route information on FortiSASE

Firewall policies on FortiGate Hub

The BGP route is not received.
The Secure Private Access (SPA) policy needs to allow PING service.
Quick mode selectors are restricting the subnet.
Network address translation (NAT) is not enabled on the spoke-to-hub policy.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

An organization must block user attempts to log in to non-company resources while using Microsoft Office 365 to prevent users from accessing unapproved cloud resources.

Which FortiSASE feature can you implement to achieve this requirement?

Application Control with Inline-CASB
Web Filter with Inline-CASB
SSL deep inspection
Data loss prevention (DLP)

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

Which two components are part of onboarding a secure web gateway (SWG) endpoint? (Choose two.)

Proxy auto-configuration (PAC) file
FortiSASE SSL VPN gateway URL
FortiSASE CA certificate
FortiSASE invitation code

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.