FCSS_SASE_AD-23 by Fortinet Valid Free Exam Practice Test

Question 1

Refer to the exhibits.

When remote users connected to FortiSASE require access to internal resources on Branch-2. how will traffic be routed?

A. FortiSASE will use the SD-WAN capability and determine that traffic will be directed to HUB-1, which will then route traffic to Branch-2. B. FortiSASE will use the AD VPN protocol and determine that traffic will be directed to Branch-2 directly, using a dynamic route C. FortiSASE will use the SD-WAN capability and determine that traffic will be directed to HUB-2. which will then route traffic to Branch-2. D. FortiSASE will use the AD VPN protocol and determine that traffic will be directed to Branch-2 directly, using a static route

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 2

Which two deployment methods are used to connect a FortiExtender as a FortiSASE LAN extension? (Choose two.)

A. Connect FortiExtender to FortiSASE using FortiZTP B. Enable Control and Provisioning Wireless Access Points (CAPWAP) access on the FortiSASE portal. C. Enter the FortiSASE domain name in the FortiExtender GUI as a static discovery server D. Configure an IPsec tunnel on FortiSASE to connect to FortiExtender.

Correct Answer: A,C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 3

An organization wants to block all video and audio application traffic but grant access to videos from CNN Which application override action must you configure in the Application Control with Inline-CASB?

A. Permit B. Exempt C. Allow D. Pass

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 4

Refer to the exhibits.

A FortiSASE administrator is trying to configure FortiSASE as a spoke to a FortiGate hub. The tunnel is up to the FortiGale hub. However, the administrator is not able to ping the webserver hosted behind the FortiGate hub.
Based on the output, what is the reason for the ping failures?

A. Network address translation (NAT) is not enabled on the spoke-to-hub policy. B. The Secure Private Access (SPA) policy needs to allow PING service. C. Quick mode selectors are restricting the subnet. D. The BGP route is not received.

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Fortinet FCSS FortiSASE 23 Administrator - FCSS_SASE_AD-23 Exam Practice Test