Online Access Free FCSS_SASE_AD-25 Exam Questions

What can be configured on FortiSASE as an additional layer of security for FortiClient registration?

• A.user verification
• B.device identification
• C.security posture tags
• D.application inventory

Refer to the exhibits.




A FortiSASE administrator is trying to configure FortiSASE as a spoke to a FortiGate hub.
The VPN tunnel does not establish.
Which configuration needs to be modified to bring the tunnel up?

• A.Auto-discovery-sender must be disabled on IPsec phase1 settings.
• B.The BGP router ID must match on the hub and FortiSASE.
• C.The network overlay ID must match on FortiSASE and the hub.
• D.FortiSASE spoke devices do not support mode config.

An organization must block user attempts to log in to non-company resources while using Microsoft Office
365 to prevent users from accessing unapproved cloud resources.
Which FortiSASE feature can you implement to meet this requirement?

• A.application control with inline-CASB
• B.DNS filter with domain filter
• C.data loss prevention (DLP) with Microsoft Purview Information Protection (MPIP)
• D.web filter with inline-CASB

Refer to the exhibits.


A FortiSASE administrator has configured an antivirus profile in the security profile group and applied it to the internet access policy. Remote users are still able to download the eicar.com-zip file from https://eicar.org.
Which configuration on FortiSASE is allowing users to perform the download?

• A.Intrusion prevention is disabled.
• B.Web filter is allowing the URL.
• C.Application control is exempting all the browser traffic.
• D.Deep inspection is not enabled.

Refer to the exhibit.

An organization must inspect all the endpoint internet traffic on FortiSASE, and exclude Google Maps traffic from the FortiSASE VPN tunnel and redirect it to the endpoint physical interface.
Which configuration must you apply to achieve this requirement?

• A.Add the Google Maps URL as a steering bypass destination in the endpoint profile.
• B.Add the Google Maps URL in the zero trust network access (ZTNA) TCP access proxy forwarding rule.
• C.Configure a steering bypass tunnel firewall policy using Google Maps FQDN to exclude and redirect the traffic.
• D.Exempt Google Maps in URL filtering in the web filter profile.