Question 1

What is the recommended method to upgrade FortiClient in a FortiSASE deployment?

Options :

A : Remote users must upgrade the FortiClient manually.

B : FortiSASE automatically upgrades FortiClient when a new version is released.

C : The FortiSASE administrator must assign endpoint groups to an endpoint upgrade rule.

D : The FortiSASE administrator will upload the desired FortiClient version to the FortiSASE portal and push it to endpoints.

Answer: C

Question 2

In which two ways does FortiSASE help organizations ensure secure access for remote workers? (Choose two.)

Options :

A : It secures traffic from endpoints to cloud applications.

B : It uses the FortiCloud organizational units to assign endpoint profiles to remote workers.

C : It uses the identity and access management (IAM) portal to validate the identities of remote workers.

D : It offers zero trust network access (ZTNA) capabilities.

Answer: A,D

Question 3

Which information does FortiSASE use to bring network lockdown into effect on an endpoint?

Options :

A : Zero-day malware detection on endpoint

B : The number of critical vulnerabilities detected on the endpoint

C : The security posture of the endpoint based on ZTNA tags

D : The connection status of the tunnel to FortiSASE

Answer: C

Question 4

Which description of the FortiSASE inline-CASB component is true?

Options :

A : It has limited visibility when data is transmitted.

B : It detects data in motion.

C : It is placed outside the traffic path.

D : It relies on API to integrate with cloud services.

Answer: B

Question 5

Which two components are part of onboarding a secure web gateway (SWG) endpoint for secure internet access (SIA)? (Choose two.)

Options :

A : proxy auto-configuration (PAC) file

B : FortiSASE certificate authority (CA) certificate

C : FortiClient software

D : tunnel policy

Answer: A,C

Free FCSS_SASE_AD-25 Mock Exam – Practice Online Confidently