FCSS_SASE_AD-23 무료 덤프문제 온라인 액세스

Refer to the exhibits.





A FortiSASE administrator is trying to configure FortiSASE as a spoke to a FortiGate hub. The tunnel is up to the FortiGale hub. However, the administrator is not able to ping the webserver hosted behind the FortiGate hub.
Based on the output, what is the reason for the ping failures?

• A.The Secure Private Access (SPA) policy needs to allow PING service.
• B.Quick mode selectors are restricting the subnet.
• C.The BGP route is not received.
• D.Network address translation (NAT) is not enabled on the spoke-to-hub policy.

Which role does FortiSASE play in supporting zero trust network access (ZTNA) principles9

• A.It enables VPN connections for remote employees.
• B.It integrateswith software-defined network (SDN) solutions.
• C.It offers hardware-based firewalls for network segmentation.
• D.It can identify attributes on the endpoint for security posture check.

Refer to the exhibits.



A FortiSASE administrator has configured an antivirus profile in the security profile group and applied it to the internet access policy. Remote users are still able to download the eicar.com-zip file from https://eicar.org.
Traffic logs show traffic is allowed by the policy.
Which configuration on FortiSASE is allowing users to perform the download?

• A.The HTTPS protocol is not enabled in the antivirus profile.
• B.Force certificate inspection is enabled in the policy.
• C.Web filter is allowing the traffic.
• D.IPS is disabled in the security profile group.

Which secure internet access (SIA) use case minimizes individual workstation or device setup, because you do not needto install FortiClient on endpoints or configure explicit web proxy settings on web browser-based end points?

• A.SIA for agentless remote users
• B.SIA for inline-CASB users
• C.SIA for site-based remote users
• D.SIA for SSLVPN remote users

When accessing the FortiSASE portal for the first time, an administrator must select data center locations for which three FortiSASE components? (Choose three.)

• A.Authentication
• B.Logging
• C.Endpoint management
• D.Points of presence
• E.SD-WAN hub