Fortinet FCSS_SASE_AD-24 Exam Questions

Question 6 of 23

Which two components are part of onboarding a secure web gateway (SWG) endpoint? (Choose two.)

Proxy auto-configuration (PAC) file

FortiSASE SSL VPN gateway URL

FortiSASE CA certificate

FortiSASE invitation code

Correct Answer: A, C

Question 7 of 23

In which three ways does FortiSASE help organizations ensure secure access for remote workers? (Choose three.)

It enforces granular access policies based on user identities.

It enforces multi-factor authentication (MFA) to validate remote users.

It secures traffic from endpoints to cloud applications.

It uses the identity & access management (IAM) portal to validate the identities of remote workers.

It offers zero trust network access (ZTNA) capabilities.

Correct Answer: A, C, E

Question 8 of 23

Which two statements describe a zero trust network access (ZTNA) private access use case? (Choose two.)

All FortiSASE user-based deployments are supported.

Data center redundancy is offered.

All TCP-based applications are supported.

The security posture of the device is secure.

Correct Answer: C, D

Question 9 of 23

Which statement applies to a single sign-on (SSO) deployment on FortiSASE?

SSO is recommended only for agent-based deployments.

SSO users can be imported into FortiSASE and added to user groups.

SSO overrides any other previously configured user authentication.

SSO identity providers can be integrated using public and private access types.

Correct Answer: C

Question 10 of 23

During FortiSASE provisioning, how many security points of presence (POPs) need to be configured by the FortiSASE administrator?

three

one

two

four

Correct Answer: C