Online Access Free FCSS_SASE_AD-24 Exam Questions

Which of the following describes the FortiSASE inline-CASB component?

• A.It detects data at rest.
• B.It is placed directly in the traffic path between the endpoint and cloud applications.
• C.It provides visibility for unmanaged locations and devices.
• D.It uses API to connect to the cloud applications.

Which secure internet access (SIA) use case minimizes individual endpoint configuration?

• A.Site-based remote user internet access
• B.SIA using ZTNA
• C.Agentless remote user internet access
• D.SIA for SSL VPN remote users

What are two advantages of using zero-trust tags? (Choose two.)

• A.Zero-trust tags can be used to allow or deny access to network resources
• B.Zero-trust tags can determine the security posture of an endpoint.
• C.Zero-trust tags can be used to allow secure web gateway (SWG) access
• D.Zero-trust tags can be used to create multiple endpoint profiles which can be applied to different endpoints

Your organization is currently using FortiSASE for its cybersecurity. They have recently hired a contractor who will work from the HQ office and who needs temporary internet access in order to set up a web-based point of sale (POS) system.
What is the recommended way to provide internet access to the contractor?

• A.Use a proxy auto-configuration (PAC) file and provide secure web gateway (SWG) service as an explicit web proxy.
• B.Configure a VPN policy on FortiSASE to provide access to the internet.
• C.Use zero trust network access (ZTNA) and tag the client as an unmanaged endpoint.
• D.Use FortiClient on the endpoint to manage internet access.

Refer to the exhibit.

The daily report for application usage shows an unusually high number of unknown applications by category.
What are two possible explanations for this? (Choose two.)

• A.The inline-CASB application control profile does not have application categories set to Monitor
• B.Deep inspection is not being used to scan traffic.
• C.Zero trust network access (ZTNA) tags are not being used to tag the correct users.
• D.Certificate inspection is not being used to scan application traffic.