FCSS_SASE_AD-24 試験問題を無料オンラインアクセス

Refer to the exhibits.

Antivirus is installed on a Windows 10 endpoint, but the windows application firewall is stopping it from running.
What will the endpoint security posture check be?

• A.FortiClient will tag the endpoint as FortiSASE-Non-Compliant.
• B.FortiClient telemetry will be disconnected because of failed compliance.
• C.FortiClient will block the endpoint from getting access to the network.
• D.FortiClient will prompt the user to enable antivirus.

Refer to the exhibit.

A company has a requirement to inspect all the endpoint internet traffic on FortiSASE, and exclude Google Maps traffic from the FortiSASE VPN tunnel and redirect it to the endpoint physical Interface.
Which configuration must you apply to achieve this requirement?

• A.Configure the Google Maps FQDN as a split tunneling destination on the FortiSASE endpoint profile.
• B.Configure a static route with the Google Maps FQDN on the endpoint to redirect traffic
• C.Exempt the Google Maps FQDN from the endpoint system proxy settings.
• D.Change the default DNS server configuration on FortiSASE to use the endpoint system DNS.

To complete their day-to-day operations, remote users require access to a TCP-based application that is hosted on a private web server. Which FortiSASE deployment use case provides the most efficient and secure method for meeting the remote users' requirements?

• A.next generation firewall (NGFW)
• B.zero trust network access (ZTNA) private access
• C.SD-WAN private access
• D.inline-CASB

Which two statements describe a zero trust network access (ZTNA) private access use case? (Choose two.)

• A.All TCP-based applications are supported.
• B.Data center redundancy is offered.
• C.All FortiSASE user-based deployments are supported.
• D.The security posture of the device is secure.

Refer to the exhibits.


When remote users connected to FortiSASE require access to internal resources on Branch-2. how will traffic be routed?

• A.FortiSASE will use the AD VPN protocol and determine that traffic will be directed to Branch-2 directly, using a static route
• B.FortiSASE will use the SD-WAN capability and determine that traffic will be directed to HUB-2. which will then route traffic to Branch-2.
• C.FortiSASE will use the AD VPN protocol and determine that traffic will be directed to Branch-2 directly, using a dynamic route
• D.FortiSASE will use the SD-WAN capability and determine that traffic will be directed to HUB-1, which will then route traffic to Branch-2.