Question 1

Refer to the exhibits.
WiMO-Pro and Win7-Pro are endpoints from the same remote location. WiMO-Pro can
access the internet though FortiSASE, while Wm7-Pro can no longer access the internet Given the exhibits, which reason explains the outage on Wm7-Pro?

Accepted Answer

Based on the provided exhibits, the reason why the Win7-Pro endpoint can no longer access the internet through FortiSASE is due to exceeding the total
vulnerability detected threshold. This threshold is used to determine if a device is compliant with the security requirements to access the network.
? Endpoint Compliance:
? Vulnerability Threshold:
? Impact on Network Access:
References:
? FortiOS 7.2 Administration Guide: Provides information on endpoint compliance and vulnerability management.
? FortiSASE 23.2 Documentation: Explains how vulnerability thresholds are used to determine endpoint compliance and access control.

Question 2

Which policy type is used to control traffic between the FortiClient endpoint to FortiSASE for secure internet access?

Accepted Answer

The Secure Web Gateway (SWG) policy is used to control traffic between the FortiClient endpoint and FortiSASE for secure internet access. SWG provides
comprehensive web security by enforcing policies that manage and monitor user access to the internet.
? Secure Web Gateway (SWG) Policy:
? Traffic Control:
References:
? FortiOS 7.2 Administration Guide: Details on configuring and managing SWG policies.
? FortiSASE 23.2 Documentation: Explains the role of SWG in securing internet access for endpoints.

Question 3

Refer to the exhibit.

From SurePassExam
https://www.surepassexam.com/FCSS_SASE_AD-23-exam-dumps.html (30 New Questions)
In the user connection monitor, the FortiSASE administrator notices the user name is showing random characters. Which configuration change must the
administrator make to get proper user information?

Accepted Answer

In the user connection monitor, the random characters shown for the username indicate that log anonymization is enabled. Log anonymization is a feature that
hides the actual user information in the logs for privacy and security reasons. To display proper user information, you need to disable log anonymization.
? Log Anonymization:
? Disabling Log Anonymization:
References:
? FortiSASE 23.2 Documentation: Provides detailed steps on enabling and disabling log anonymization.
? Fortinet Knowledge Base: Explains the impact of log anonymization on user monitoring and logging.

Question 4

Which FortiSASE feature ensures least-privileged user access to all applications?

Accepted Answer

Zero Trust Network Access (ZTNA) is the FortiSASE feature that ensures least-privileged user access to all applications. ZTNA operates on the principle of "never
trust, always verify," providing secure access based on the identity of users and devices, regardless of their location.
? Zero Trust Network Access (ZTNA):
? Implementation:
References:
? FortiOS 7.2 Administration Guide: Provides detailed information on ZTNA and its role in ensuring least-privileged access.
? FortiSASE 23.2 Documentation: Explains the implementation and benefits of ZTNA within the FortiSASE environment.

Question 5

An organization needs to resolve internal hostnames using its internal rather than public DNS servers for remotely connected endpoints. Which two components
must be configured on FortiSASE to achieve this? (Choose two.)

Accepted Answer

To resolve internal hostnames using internal DNS servers for remotely connected endpoints, the following two components must be configured on FortiSASE:
? Split DNS Rules:
? Split Tunneling Destinations:
References:
? FortiOS 7.2 Administration Guide: Provides details on configuring split DNS and split tunneling for VPN clients.
? FortiSASE 23.2 Documentation: Explains the implementation and configuration of split DNS and split tunneling for securely resolving internal hostnames.

Question 6

When deploying FortiSASE agent-based clients, which three features are available compared to an agentless solution? (Choose three.)

Accepted Answer

When deploying FortiSASE agent-based clients, several features are available that are not typically available with an agentless solution. These features enhance
the security and management capabilities for endpoints.
? Vulnerability Scan:
? SSL Inspection:
? Web Filter:
References:
? FortiOS 7.2 Administration Guide: Explains the features and benefits of deploying agent-based clients.
? FortiSASE 23.2 Documentation: Details the differences between agent-based and agentless solutions and the additional features provided by agent-based
deployments.

From SurePassExam
https://www.surepassexam.com/FCSS_SASE_AD-23-exam-dumps.html (30 New Questions)

Question 7

Refer to the exhibits.

From SurePassExam
https://www.surepassexam.com/FCSS_SASE_AD-23-exam-dumps.html (30 New Questions)

From SurePassExam
https://www.surepassexam.com/FCSS_SASE_AD-23-exam-dumps.html (30 New Questions)
A FortiSASE administrator is trying to configure FortiSASE as a spoke to a FortiGate hub. The tunnel is up to the FortiGale hub. However, the administrator is not
able to ping the webserver hosted behind the FortiGate hub.
Based on the output, what is the reason for the ping failures?

Accepted Answer

The reason for the ping failures is due to the quick mode selectors restricting the subnet. Quick mode selectors define the IP ranges and protocols that are
allowed through the VPN tunnel, and if they are not configured correctly, traffic to certain subnets can be blocked.
? Quick Mode Selectors:
? Diagnostic Output:
? Configuration Check:
References:

From SurePassExam
https://www.surepassexam.com/FCSS_SASE_AD-23-exam-dumps.html (30 New Questions)
? FortiOS 7.2 Administration Guide: Provides detailed information on configuring VPN tunnels and quick mode selectors.
? FortiSASE 23.2 Documentation: Explains how to set up and manage VPN tunnels, including the configuration of quick mode selectors.

Question 8

Which role does FortiSASE play in supporting zero trust network access (ZTNA) principles9

Accepted Answer

FortiSASE supports zero trust network access (ZTNA) principles by identifying attributes on the endpoint for security posture checks. ZTNA principles require
continuous verification of user and device credentials, as well as their security posture, before granting access to network resources.
? Security Posture Check:
? Zero Trust Network Access (ZTNA):
References:
? FortiOS 7.2 Administration Guide: Provides information on ZTNA and endpoint security posture checks.
? FortiSASE 23.2 Documentation: Details on how FortiSASE implements ZTNA
principles.