Fortinet NSE7_SSE_AR-26 - Fortinet NSE 7 - FortiSASE 26 Architect Exam
Page: 2 / 7
Total 35 questions
Question #6 (Topic: Exam A)
In an enterprise deployment of FortiSASE, single sign-on (SSO) is used to streamline user authentication across security services.
Which statement correctly describes an SSO capability on FortiSASE?
Which statement correctly describes an SSO capability on FortiSASE?
A. It bypasses identity verification when users access trusted networks.
B. It allows authentication to be delegated to an external identity provider such as Azure AD or SAML-based identity providers (IdPs).
C. It stores user credentials locally on FortiSASE to reduce dependency on external systems.
D. It requires users to authenticate separately for each security service for improved segmentation.
Answer: B
Question #7 (Topic: Exam A)
How is the geofencing feature used on FortiSASE?
A. To restrict application access based on time of day in specific countries
B. To monitor and block access to personal content from specific countries
C. To encrypt data at rest on endpoints located in specific countries
D. To allow or block remote user connections to FortiSASE points of presence (POPs) based on source country
Answer: D
Question #8 (Topic: Exam A)
Refer to the exhibit.
You want to configure SD-WAN on a network, as shown in the exhibit.
The network contains many FortiGate devices. Some are used as next-generation firewalls (NGFW), and some are installed with extensions such as FortiSwitch, FortiAP, or FortiExtender.
Which factors should you consider when planning your deployment?
You want to configure SD-WAN on a network, as shown in the exhibit.
The network contains many FortiGate devices. Some are used as next-generation firewalls (NGFW), and some are installed with extensions such as FortiSwitch, FortiAP, or FortiExtender.
Which factors should you consider when planning your deployment?
A. You should exclude the FortiGate devices with two types of extensions from the SD-WAN topology.
B. You should build multiple SD-WAN topologies. Each topology should contain only one type of extension.
C. You can build an SD-WAN topology that includes all devices. The hubs can be FortiGate devices with FortiExtender.
D. You can build an SD-WAN topology that includes all devices. You must define multiple regions and group devices by extension type.
Answer: C
Question #9 (Topic: Exam A)
What are three key routing principles of SD-WAN? (Choose three.)
A. SD-WAN rules are skipped if the best route to the destination is not an SD-WAN member.
B. Internet Service Database (ISDB) routes have precedence over SD-WAN rules.
C. Routes to directly connected subnets have precedence over SD-WAN rules.
D. SD-WAN members are skipped if they do not have a valid route to the destination.
E. SD-WAN rules are skipped if the best route to the destination is a static route.
Answer: ABD
Question #10 (Topic: Exam A)
Refer to the exhibit.
Which statement correctly describes the role of the ADVPN device in handling traffic?
Which statement correctly describes the role of the ADVPN device in handling traffic?
A. This device is a spoke that has received a shortcut query from a remote hub.
B. This device is a hub that has received a shortcut query from a spoke and has forwarded it to another spoke.
C. This device is a hub, and two spokes, 192.2.0.1 and 10.0.3.101, established a shortcut.
D. This device is a spoke that has received a direct shortcut query from a remote spoke.
Answer: B
