NSE7_SSE_AD-25 by Fortinet Valid Free Exam Practice Test

Question 1

Which two additional features does FortiClient integration provide with FortiSASE, when compared to secure web gateway (SWG) deployment? (Choose two.)

A. SSL inspection B. inline-CASB protection C. vulnerability management D. device posture check

Correct Answer: C,D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 2

What is the purpose of the grace period for off-net endpoints in the FortiSASE Network Lockdown feature?

A. To allow users to attempt VPN reconnection before restrictions are applied B. To permanently block network access for non-compliant endpoints C. To bypass security policies for specific applications D. To automatically reset the FortiClient configuration

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 3

Which information does FortiSASE use to bring network lockdown into effect on an endpoint?

A. The security posture of the endpoint based on ZTNA tags B. The connection status of the tunnel to FortiSASE C. Zero-day malware detection on endpoint D. The number of critical vulnerabilities detected on the endpoint

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 4

Refer to the exhibits. A FortiSASE administrator has configured an antivirus profile in the security profile group and applied it to the internet access policy. Remote users are still able to download the eicar.com-zip file from https://eicar.org.
Which configuration on FortiSASE is allowing users to perform the download?

A. Deep inspection is not enabled. B. Application control is exempting all the browser traffic. C. Intrusion prevention is disabled. D. Web filter is allowing the URL.

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 5

Drag and Drop Question
When configuring the DLP rule in FortiSASE using Regex format, what would be the correct order for the configuration steps?
Select the step in the left column, hold and drag it to a blank position in the column on the right.
Place the four correct steps in order, placing the first step in the first position at the top of the column. Once you place a step, you can move it again if you want to change your answer before moving to the next question. You need to drop four steps in the work area.
Select and drag the screen divider to change the viewable area of the source and work areas.

Correct Answer:

Explanation:
First, you define sensitive information types in a DLP Dictionary, then create the DLP Data Pattern using regex or predefined patterns. Next, you create the DLP Rule that uses the pattern to detect data. The DLP Sensor is then configured to apply the rule to traffic.

Question 6

Which two statements about the Hub Selection Method in FortiSASE Secure Private Access (SPA) are correct? (Choose two.)

A. When using Hub Health and Priority, ForiSASE selects the highest priority hub that meets the configured SLA thresholds. B. When using BGP MED, FortiSASE selects the hub with the lowest MED value only if it also meets the configured SLA thresholds. C. When using Hub Health and Priority, all hubs with the same priority are always selected regardless of SLA results. D. When using SLA thresholds, administrators can customize latency, jitter, and packet loss for each security POP.

Correct Answer: A,D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 7

What is the role of ZTNA tags in the FortiSASE Secure Internet Access (SIA) and Secure Private Access (SPA) use cases?

A. ZTNA tags determine device posture for non-web traffic protocols and are applied only in agentless deployments for SIA. B. ZTNA tags are applied to unmanaged endpoints without FortiClient to secure HTTP and HTTPS traffic in SIA and SP C. ZTNA tags determine device posture for endpoints running FortiClient and are used to grant or deny access in SIA or SPA based on that posture. D. ZTNA tags are created to isolate browser sessions in SIA and enforce data loss prevention in SPA for all devices.

Correct Answer: C

Question 8

A FortiSASE administrator is receiving reports that some users have travelled overseas and cannot establish their agent-based VPN tunnels, although they can authenticate with their SSO credentials to access 0365 and SFDC directly. The administrator reviewed the firewall policies and ZTNA tags of some users and could not find anything unusual. Which action can the administrator take to resolve this problem?

A. Instruct the users to install the updated version of the agent-based client. B. Ensure that the countries the users are visiting are not listed under the Deny list in the Geofencing settings. C. Instruct the users to restart their laptops and log in again. D. Create a dedicated firewall policy for the users.

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 9

A customer wants to ensure secure access for private applications for their users by replacing their VPN. Which two SASE technologies can you use to accomplish this task? (Choose two.)

A. zero trust network access (ZTNA) B. secure SD-WAN C. secure web gateway (SWG) and cloud access security broker (CASB) D. SD-WAN on-ramp

Correct Answer: A,B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 10

In a FortiSASE secure web gateway (SWG) deployment, which two features protect against web- based threats? (Choose two.)

A. intrusion prevention system (IPS) for web traffic B. web application firewall (WAF) for web applications C. SSL deep inspection for encrypted web traffic D. malware protection with sandboxing capabilities

Correct Answer: C,D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Fortinet NSE 7 - FortiSASE 25 Enterprise Administrator - NSE7_SSE_AD-25 Exam Practice Test