FCSS - FortiSASE 24 Administrator (FCSS_SASE_AD-24) Free Practice Test

Question 1

A customer needs to implement device posture checks for their remote endpoints while accessing the protected server. They also want the TCP traffic between the remote endpoints and the protected servers to be processed by FortiGate.
In this scenario, which three setups will achieve the above requirements? (Choose three.)

A. Configure FortiGate as a zero trust network access (ZTNA) access proxy.

B. Configure ZTNA servers and ZTNA policies on FortiGate.

C. Sync ZTNA tags from FortiSASE to FortiGate.

D. Configure private access policies on FortiSASE with ZTNA.

E. Configure ZTNA tags on FortiGate.

Correct Answer: A,B,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Which FortiSASE feature ensures least-privileged user access to all applications?

A. SD-WAN

B. zero trust network access (ZTNA)

C. thin branch SASE extension

D. secure web gateway (SWG)

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Refer to the exhibits.

A FortiSASE administrator is trying to configure FortiSASE as a spoke to a FortiGate hub. The VPN tunnel does not establish Based on the provided configuration, what configuration needs to be modified to bring the tunnel up?

A. The hub needs IKEv2 enabled in the IPsec phase 1 settings.

B. NAT needs to be enabled in the Spoke-to-Hub firewall policy.

C. FortiSASE spoke devices do not support mode config.

D. The BGP router ID needs to match on the hub and FortiSASE.

Correct Answer: A

Question 4

Refer to the exhibit.

Based on the configuration shown, in which two ways will FortiSASE process sessions that require FortiSandbox inspection? (Choose two.)

A. All infected files will be sent to a on-premises FortiSandbox for inspection

B. All infected files that FortiSandbox detects as malicious will be quarantined.

C. All files detected on a LSE drive will be sent to FortiSandbox for analysis

D. Only endpoints assigned with profile for Sandbox Detection will be processed by the sandbox feature.

Correct Answer: B,C

Question 5

Which FortiSASE feature ensures least-privileged user access to corporate applications that are protected by an on-premises FortiGate?

A. Identity & access management (IAM)

B. Privileged access management (PAM)

C. zero trust network access (ZTNA)

D. role-based access control (RBAC)

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

An organization needs to resolve internal hostnames using its internal rather than public DNS servers for remotely connected endpoints. Which two components must be configured on FortiSASE to achieve this? (Choose two.)

A. Split DNS rules

B. SSL deep inspection

C. DNS filter

D. Split tunnelling destinations

Correct Answer: A,B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Fortinet FCSS - FortiSASE 24 Administrator (FCSS_SASE_AD-24) Free Practice Test