FCSS - FortiSASE 25 Administrator (FCSS_SASE_AD-25) Free Practice Test

Question 1

A company must provide access to a web server through FortiSASE secure private access for contractors.
What is the recommended method to provide access?

A. Publish the web server URL on a bookmark portal and share it with contractors.

B. Update the DNS records on the endpoint to access private applications.

C. Configure a TCP access proxy forwarding rule and push it to the contractor FortiClient endpoint.

D. Update the PAC file with the web server URL and share it with contractors.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

An administrator must restrict endpoints from certain countries from connecting to FortiSASE.
Which configuration can achieve this?

A. Configure a network lockdown policy on the endpoint profiles.

B. Configure a geography address object as the source for a deny policy.

C. Configure geofencing to restrict access from the required countries.

D. Configure source IP anchoring to restrict access from the specified countries.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Refer to the exhibits.

A FortiSASE administrator is trying to configure FortiSASE as a spoke to a FortiGate hub.
The VPN tunnel does not establish.
Which configuration needs to be modified to bring the tunnel up?

A. Auto-discovery-sender must be disabled on IPsec phase1 settings.

B. FortiSASE spoke devices do not support mode config.

C. The network overlay ID must match on FortiSASE and the hub.

D. The BGP router ID must match on the hub and FortiSASE.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

How does FortiSASE hide user information when viewing and analyzing logs?

A. By hashing log data

B. By tokenization in log data

C. By compressing log data

D. By masking log data

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

When accessing the FortiSASE portal for the first time, an administrator must select data center locations for which three FortiSASE components? (Choose three.)

A. Endpoint management

B. Sandbox

C. Identity & access management (IAM)

D. Points of presence

E. Logging

Correct Answer: A,D,E

Question 6

Which service is included in a secure access service edge (SASE) solution, but not in a security service edge (SSE) solution?

A. CASB

B. SD-WAN

C. ZTNA

D. SWG

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Fortinet FCSS - FortiSASE 25 Administrator (FCSS_SASE_AD-25) Free Practice Test