NSE7-SASE Practice Questions & Answers • ExamPrepare

18 questions in this view

Page 1 of 3

Question 1

Which two settings are automatically pushed from FortiSASE to FortiClient in a new FortiSASE deployment with default settings? (Choose two.)

FortiSASE certificate authority (CA) certificate
Zero trust network access (ZTNA) tags
Tunnel profile
Real-time protection

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

Which authentication method overrides any other previously configured user authentication on FortiSASE?

Local
MFA
SSO
RADIUS

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

Refer to the exhibits.

Jumpbox and Windows-AD are endpoints from the same remote location. Jumpbox can access the internet through FortiSASE, while Windows-AD can no longer access the internet.

Based on the information in the exhibits, which reason explains the outage on Windows-AD?

Managed Endpoints

ZTNA Tagging Rules

Secure Internet Access Policy

The FortiClient version installed on Windows-AD does not match the expected version on FortiSASE.
The device security posture for Windows-AD has changed.
Windows-AD is excluded from FortiSASE management.
The remote VPN user on Windows-AD no longer matches any VPN policy.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

Refer to the exhibit.

The daily report for application usage for internet traffic shows an unusually high number of unknown applications by category.

What are two possible explanations for this? (Choose two.)

Daily report for application usage

Certificate inspection is not being used to scan application traffic.
Deep inspection is not being used to scan traffic.
The inline-CASB application control profile does not have application categories set to Monitor .
The private access policy must be to set to log Security Events.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

What can be configured on FortiSASE as an additional layer of security for FortiClient registration?

User verification
Security posture tags
Application inventory
Device identification

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

What is the role of ZTNA tags in the FortiSASE Secure Internet Access (SIA) and Secure Private Access (SPA) use cases?

ZTNA tags are created to isolate browser sessions in SIA and enforce data loss prevention in SPA for all devices.
ZTNA tags determine device posture for non-web traffic protocols and are applied only in agentless deployments for SIA.
ZTNA tags determine device posture for endpoints running FortiClient and are used to grant or deny access in SIA or SPA based on that posture.
ZTNA tags are applied to unmanaged endpoints without FortiClient to secure HTTP and HTTPS traffic in SIA and SPA.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.