Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home Fortinet FCSS_SASE_AD-23

Fortinet FCSS_SASE_AD-23 Exam Practice Questions (P. 2)

  • Full Access (54 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #6
Refer to the exhibit.

A company has a requirement to inspect all the endpoint internet traffic on FortiSASE, and exclude Google Maps traffic from the FortiSASE VPN tunnel and redirect it to the endpoint physical interface.
Which configuration must you apply to achieve this requirement?
  1. A
    Exempt the Google Maps FQDN from the endpoint system proxy settings.
  2. B
    Configure a static route with the Google Maps FQDN on the endpoint to redirect traffic
  3. C
    Configure the Google Maps FQDN as a split tunneling destination on the FortiSASE endpoint profile.
  4. D
    Change the default DNS server configuration on FortiSASE to use the endpoint system DNS.

Correct Answer: C ?️

Question #7
Refer to the exhibit.

To allow access, which web filter configuration must you change on FortiSASE?
  1. A
    FortiGuard category-based filter
  2. B
    content filter
  3. C
    URL Filter
  4. D
    inline cloud access security broker (CASB) headers

Correct Answer: B ?️

Question #8
Refer to the exhibits.


Win10-Pro and Win7-Pro are endpoints from the same remote location. Win10-Pro can access the internet though FortiSASE, while Win7-Pro can no longer access the internet.
Given the exhibits, which reason explains the outage on Win7-Pro?
  1. A
    The Win7-Pro device posture has changed.
  2. B
    Win7-Pro cannot reach the FortiSASE SSL VPN gateway
  3. C
    The Win7-Pro FortiClient version does not match the FortiSASE endpoint requirement.
  4. D
    Win-7 Pro has exceeded the total vulnerability detected threshold.

Correct Answer: A ?️

Question #9
Refer to the exhibits.





A FortiSASE administrator is trying to configure FortiSASE as a spoke to a FortiGate hub. The tunnel is up to the FortiGate hub. However, the administrator is not able to ping the Webserver hosted behind the FortiGate hub.
Based on the output, what is the reason for the ping failures?
  1. A
    The Secure Private Access (SPA) policy needs to allow PING service.
  2. B
    Quick mode selectors are restricting the subnet.
  3. C
    The BGP route is not received.
  4. D
    Network address translation (NAT) is not enabled on the spoke-to-hub policy.

Correct Answer: A ?️

Question #10
An organization wants to block all video and audio application traffic but grant access to videos from CNN.
Which application override action must you configure in the Application Control with Inline-CASB?
  1. A
    Allow
  2. B
    Pass
  3. C
    Permit
  4. D
    Exempt

Correct Answer: A ?️

Previous Questions Next Questions

All Pages