FCSS_SASE_AD-24 試験問題を無料オンラインアクセス

Which technology is used with IPsec for spoke-to-spoke connectivity in a Secure Private Access (SPA) with SD-WAN deployment?

• A.EBGP
• B.ADVPN
• C.OVTEP
• D.EVPN

Refer to the exhibit.

The daily report for application usage shows an unusually high number of unknown applications by category.
What are two possible explanations for this? (Choose two.)

• A.The inline-CASB application control profile does not have application categories set to Monitor
• B.Deep inspection is not being used to scan traffic.
• C.Certificate inspection is not being used to scan application traffic.
• D.Zero trust network access (ZTNA) tags are not being used to tag the correct users.

Which two deployment methods are used to connect a FortiExtender as a FortiSASE LAN extension? (Choose two.)

• A.Connect FortiExtender to FortiSASE using FortiZTP
• B.Enter the FortiSASE domain name in the FortiExtender GUI as a static discovery server
• C.Enable Control and Provisioning Wireless Access Points (CAPWAP) access on the FortiSASE portal.
• D.Configure an IPsec tunnel on FortiSASE to connect to FortiExtender.

Which two advantages does FortiSASE bring to businesses with multiple branch offices? (Choose two.)

• A.it offers customizable dashboard views for each branch location
• B.It enables seamless integration with third-party firewalls.
• C.It offers centralized management for simplified administration.
• D.It eliminates the need to have an on-premises firewall for each branch.

Refer to the exhibit.

A company has a requirement to inspect all the endpoint internet traffic on FortiSASE, and exclude Google Maps traffic from the FortiSASE VPN tunnel and redirect it to the endpoint physical Interface.
Which configuration must you apply to achieve this requirement?

• A.Configure a static route with the Google Maps FQDN on the endpoint to redirect traffic
• B.Exempt the Google Maps FQDN from the endpoint system proxy settings.
• C.Change the default DNS server configuration on FortiSASE to use the endpoint system DNS.
• D.Configure the Google Maps FQDN as a split tunneling destination on the FortiSASE endpoint profile.