Online Access Free NSE7_SSE_AD-25 Practice Test

During FortiSASE provisioning, how many security points of presence (POPs) need to be configured by the FortiSASE administrator?

• A.3
• B.2
• C.1
• D.4

An existing Fortinet SD-WAN customer is reviewing the FortiSASE ordering guide to identify which add-on is needed to allow future FortiSASE remote users to reach private resources.
Which add-on should the customer consider to allow private access?

• A.FortiSASE SPA add-on
• B.FortiSASE Global add-on
• C.FortiSASE Branch On-Ramp add-on
• D.FortiSASE Dedicated Public IP Address add-on

Which two statements about on-ramp tunnels on FortiSASE are correct? (Choose two.)

• A.SSL deep inspection for site-based users is fully functional without installing the FortiSASE certificate authority certificate.
• B.Only FortiExtender and FortiAP devices are supported for on-ramp tunnels.
• C.The branch on-ramp and secure private access (SPA) features share the same BGP configuration.
• D.A branch device can connect to two or more on-ramp locations.

Refer to the exhibits. Antivirus is installed on a Windows 10 endpoint, but the windows application firewall is stopping it from running.
What will the endpoint security posture check be?

• A.FortiClient will trigger network lockdown on the endpoint.
• B.FortiClient will tag the endpoint as FortiSASE-Non-Compliant.
• C.FortiClient will prompt the user to enable antivirus.
• D.FortiClient will be unmanaged from FortiSASE due to failed compliance.

What is the purpose of the grace period for off-net endpoints in the FortiSASE Network Lockdown feature?

• A.To permanently block network access for non-compliant endpoints
• B.To automatically reset the FortiClient configuration
• C.To bypass security policies for specific applications
• D.To allow users to attempt VPN reconnection before restrictions are applied