Online Access Free NSE7_SSE_AD-25 Practice Test

Which two statements about on-ramp tunnels on FortiSASE are correct? (Choose two.)

• A.A branch device can connect to two or more on-ramp locations.
• B.The branch on-ramp and secure private access (SPA) features share the same BGP configuration.
• C.Only FortiExtender and FortiAP devices are supported for on-ramp tunnels.
• D.SSL deep inspection for site-based users is fully functional without installing the FortiSASE certificate authority certificate.

Your organization is currently using FortiSASE for its cybersecurity. They have recently hired a contractor who will work from the HQ office and who needs temporary internet access in order to set up a web-based point of sale (POS) system.
What is the recommended way to provide internet access to the contractor?

• A.Use a tunnel policy with a contractors user group as the source on FortiSASE to provide internet access.
• B.Use a proxy auto-configuration (PAC) file and provide secure web gateway (SWG) service as an explicit web proxy.
• C.Use the self-registration portal on FortiSASE to grant internet access.
• D.Use zero trust network access (ZTNA) and tag the client as an unmanaged endpoint.

What is the benefit of SD-WAN on-ramp deployment with FortiSASE?

• A.To provide access to private applications using the bookmark portal
• B.To secure internet traffic for branch users
• C.To manage branch location endpoints
• D.To provide device compliance checks using ZTNA tags

Refer to the exhibits. How will the application vulnerabilities be patched, based on the exhibits provided?

• A.The vulnerability will be patched automatically based on the endpoint profile configuration.
• B.An administrator will patch the vulnerability remotely using FortiSASE.
• C.The vulnerability will be patched by installing the patch from the vendor's website.
• D.The end user will patch the vulnerabilities using the FortiClient software.

A AFortiSASE customer has been enforcing always-on VPN for their remote-users running FortiClient.
What option can be enabled under the customer's Endpoint Profile o allow them access different resources located in the same L2 network?

• A.Allow local LAN Access into user Endpoint Profile before they get connected to the VPN
• B.Endpoint Sandbox protection for VPN users
• C.Network Lockdown for endpoints with VPN enabled
• D.Endpoint Anti-Virus protection in the Endpoint Profile for VPN