FCSS_SASE_AD-25 Exam - Free Fortinet Questions and Answers

Question #11 (Topic: Exam A)

Refer to the exhibits.

Jumpbox and Windows-AD are endpoints from the same remote location. Jumpbox can access the internet through FortiSASE, while Windows-AD can no longer access the internet.
Based on the information in the exhibits, which reason explains the outage on Windows-AD?

A. Windows-AD is excluded from FortiSASE management. B. The FortiClient version installed on Windows AD does not match the expected version on FortiSASE. C. The device posture for Windows-AD has changed. D. The remote VPN user on Windows-AD no longer matches any VPN policy.

Answer: C

Question #12 (Topic: Exam A)

Which description of the FortiSASE inline-CASB component is true?

A. It has limited visibility when data is transmitted. B. It detects data in motion. C. It is placed outside the traffic path. D. It relies on API to integrate with cloud services.

Answer: B

Question #13 (Topic: Exam A)

Which authentication method overrides any other previously configured user authentication on FortiSASE?

A. MFA B. Local C. RADIUS D. SSO

Answer: D

Question #14 (Topic: Exam A)

What are two advantages of using zero-trust tags? (Choose two.)

A. Zero-trust tags can determine the security posture of an endpoint. B. Zero-trust tags can be assigned to endpoint profiles based on user groups. C. Zero-trust tags can be used to allow or deny access to network resources. D. Zero-trust tags can help monitor endpoint system resource usage.

Answer: AC

Question #15 (Topic: Exam A)

Which FortiSASE feature ensures least-privileged user access to corporate applications that are protected by an on-premises FortiGate device?

A. secure web gateway (SWG) B. zero trust network access (ZTNA) C. cloud access security broker (CASB) D. remote browser isolation (RBI)

Answer: B

Fortinet FCSS_SASE_AD-25 - FCSS - FortiSASE 25 Administrator Exam