FCSS_SASE_AD-25無料問題集「Fortinet FCSS - FortiSASE 25 Administrator」

質問 1

What are two benefits of deploying FortiSASE with FortiGate ZTNA access proxy? (Choose two.)

（A）It is ideal for latency-sensitive applications.

（B）The on-premises FortiGate performs a device posture check.

（C）It supports both agentless ZTNA and agent-based ZTNA.

（D）It offers data center redundancy.

正解：A、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

A customer wants to upgrade their legacy on-premises proxy to a cloud-based proxy for a hybrid network.
Which two FortiSASE features would help the customer achieve this outcome? (Choose two.)

（A）sandbox cloud

（B）secure web gateway (SWG)

（C）zero trust network access (ZTNA)

（D）inline-CASB

正解：B、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

How do security profile group objects behave when central management is enabled on FortiSASE?

（A）Objects created on FortiSASE can be retrieved on FortiManager.

（B）Objects support two-way synchronization.

（C）Objects are considered read-only on FortiSASE.

（D）Objects that are only flow-based are supported.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

An organization must block user attempts to log in to non-company resources while using Microsoft Office
365 to prevent users from accessing unapproved cloud resources.
Which FortiSASE feature can you implement to meet this requirement?

（A）data loss prevention (DLP) with Microsoft Purview Information Protection (MPIP)

（B）application control with inline-CASB

（C）DNS filter with domain filter

（D）web filter with inline-CASB

正解：D 解答を投票する

質問 5

Refer to the exhibits.

A FortiSASE administrator has configured FortiSASE as a spoke to a FortiGate hub. The tunnel is up to the FortiGate hub. However, the remote FortiClient is not able to access the web server hosted behind the FortiGate hub.
Based on the exhibits, what is the reason for the access failure?

（A）The hub is not advertising the required routes.

（B）The hub firewall policy does not include the FortiClient address range.

（C）The server subnet BGP route was not received on FortiSASE.

（D）A private access policy has denied the traffic because of failed compliance

正解：B 解答を投票する

質問 6

Which two of the following can release the network lockdown on the endpoint applied by FortiSASE?
(Choose two.)\

（A）When the endpoint connects to the FortiSASE tunnel

（B）When the endpoint is determined as on-net

（C）When the endpoint is determined as compliant using ZTNA tags

（D）When the endpoint is rebooted

正解：A、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

FCSS_SASE_AD-25 無料問題集「Fortinet FCSS - FortiSASE 25 Administrator」

弊社を連絡する

関連リンク

トップ試験