Online Access Free FCSS_SASE_AD-23 Practice Test

Which two advantages does FortiSASE bring to businesses with multiple branch offices? (Choose two.)

• A.It enables seamless integration with third-party firewalls.
• B.it offers customizable dashboard views for each branch location
• C.It eliminates the need to have an on-premises firewall for eachbranch.
• D.It offers centralized management for simplified administration.

Refer to the exhibits.





A FortiSASE administrator is trying to configure FortiSASE as a spoke to a FortiGate hub. The tunnel is up to the FortiGale hub. However, the administrator is not able to ping the webserver hosted behind the FortiGate hub.
Based on the output, what is the reason for the ping failures?

• A.The BGP route is not received.
• B.The Secure Private Access (SPA) policy needs to allow PING service.
• C.Quick mode selectors are restricting the subnet.
• D.Network address translation (NAT) is not enabled on the spoke-to-hub policy.

Which policy type is used to control traffic between the FortiClient endpoint to FortiSASE for secure internet access?

• A.VPN policy
• B.private access policy
• C.thin edge policy
• D.secure web gateway (SWG) policy

You are designing a new network for Company X and one of the new cybersecurity policy requirements is that all remote user endpoints must always be connected and protected Which FortiSASE componentfacilitates this always-on security measure?

• A.inline-CASB
• B.unified FortiClient
• C.thin-branch SASE extension
• D.site-based deployment

Refer to the exhibits.



A FortiSASE administrator has configured an antivirus profile in the security profile group and applied it to the internet access policy. Remote users are still able to download the eicar.com-zip file from https://eicar.org.
Traffic logs show traffic is allowed by the policy.
Which configuration on FortiSASE is allowing users to perform the download?

• A.Force certificate inspection is enabled in the policy.
• B.IPS is disabled in the security profile group.
• C.The HTTPS protocol is not enabled in the antivirus profile.
• D.Web filter is allowing the traffic.