Free FCSS_SASE_AD-25 Sample Questions — FCSS - FortiSASE 25 Administrator

An administrator must restrict endpoints from certain countries from connecting to FortiSASE. Which configuration can achieve this?

• A. Configure a network lockdown policy on the endpoint profiles
• B. Configure a geography address object as the source for a deny policy
• C. Configure geofencing to restrict access from the required countries
• D. Configure source IP anchoring to restrict access from the specified countries

An organization must block user attempts to log in to non-company resources while using Microsoft Office 365 to prevent users from accessing unapproved cloud resources. Which FortiSASE feature can you implement to meet this requirement?

• A. application control with inline-CASB
• B. data loss prevention (DLP) with Microsoft Purview Information Protection (MPIP)
• C. web filter with inline-CASB
• D. DNS filter with domain filter

A company must provide access to a web server through FortiSASE secure private access for contractors. What is the recommended method to provide access?

• A. Configure a TCP access proxy forwarding rule and push it to the contractor FortiClient endpoint
• B. Update the DNS records on the endpoint to access private applications
• C. Publish the web server URL on a bookmark portal and share it with contractors
• D. Update the PAC file with the web server URL and share it with contractors

Which information can an administrator monitor using reports generated on FortiSASE?

• A. sanctioned and unsanctioned Software-as-a-Service (SaaS) applications usage
• B. FortiClient vulnerability assessment
• C. SD-WAN performance
• D. FortiSASE administrator and system events

What are two benefits of deploying secure private access with SD-WAN? (Choose two.)

• A. a direct access proxy tunnel from FortiClient to the on-premises FortiGate
• B. ZTNA posture check performed by the hub FortiGate
• C. support of both TCP and UDP applications
• D. inline security inspection by FortiSASE