FCSS_SASE_AD-24 Exam Training Practice Tests (Fortinet FCSS

Question 1

Refer to the exhibits.

A FortiSASE administrator is trying to configure FortiSASE as a spoke to a FortiGate hub. The tunnel is up to the FortiGale hub. However, the administrator is not able to ping the webserver hosted behind the FortiGate hub.
Based on the output, what is the reason for the ping failures?

A. The Secure Private Access (SPA) policy needs to allow PING service. B. Quick mode selectors are restricting the subnet. C. Network address translation (NAT) is not enabled on the spoke-to-hub policy. D. The BGP route is not received.

Correct Answer: D

Question 2

Refer to the exhibit.

The daily report for application usage shows an unusually high number of unknown applications by category.
What are two possible explanations for this? (Choose two.)

A. Certificate inspection is not being used to scan application traffic. B. Zero trust network access (ZTNA) tags are not being used to tag the correct users. C. The inline-CASB application control profile does not have application categories set to Monitor D. Deep inspection is not being used to scan traffic.

Correct Answer: C,D

Question 3

When viewing the daily summary report generated by FortiSASE, the administrator notices that the report contains very little data.
What is a possible explanation for this almost empty report?

A. The web filter security profile is not set to Monitor. B. Digital experience monitoring is not configured. C. Log allowed traffic is set to Security Events for all policies. D. There are no security profile groups applied to all policies.

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 4

A customer wants to upgrade their legacy on-premises proxy to a cloud-based proxy for a hybrid network. Which two FortiSASE features would help the customer achieve this outcome? (Choose two.)

A. Digital experience monitoring (DEM) B. Inhne-CASB C. Zero trust network access (ZTNA) D. Secure web gateway (SWG)

Correct Answer: B,D

Question 5

What are two requirements to enable the MSSP feature on FortiSASE? (Choose two.)

A. Assign role-based access control (RBAC) to IAM users using FortiCloud IAM portal. B. Enable multi-tenancy on the FortiSASE portal. C. Configure MSSP user accounts and permissions on the FortiSASE portal. D. Add FortiCloud premium subscription on the root FortiCloud account.

Correct Answer: A,D

Question 6

An organization wants to block all video and audio application traffic but grant access to videos from CNN Which application override action must you configure in the Application Control with Inline-CASB?

A. Allow B. Pass C. Exempt D. Permit

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Fortinet FCSS - FortiSASE 24 Administrator - FCSS_SASE_AD-24 Exam Practice Test