Fortinet FCSS - FortiSASE 24 Administrator - FCSS_SASE_AD-24 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Which event log subtype captures FortiSASE SSL VPN user creation?

A. Endpoint Events B. Administrator Events C. VPN Events D. User Events

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 2

When viewing the daily summary report generated by FortiSASE, the administrator notices that the report contains very little data.
What is a possible explanation for this almost empty report?

A. Log allowed traffic is set to Security Events for all policies. B. Digital experience monitoring is not configured. C. The web filter security profile is not set to Monitor. D. There are no security profile groups applied to all policies.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

Which statement best describes the Digital Experience Monitor (DEM) feature on FortiSASE?

A. It requires a separate DEM agent to be downloaded from the FortiSASE portal and installed on the endpoint. B. It can be used to request a detailed analysis of the endpoint from the FortiGuard team. C. It can help IT and security teams ensure consistent security monitoring for remote users. D. It provides end-to-end network visibility from all the FortiSASE security PoPs to a specific SaaS application.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 4

Refer to the exhibit.

The daily report for application usage shows an unusually high number of unknown applications by category.
What are two possible explanations for this? (Choose two.)

A. Certificate inspection is not being used to scan application traffic. B. Zero trust network access (ZTNA) tags are not being used to tag the correct users. C. The inline-CASB application control profile does not have application categories set to Monitor D. Deep inspection is not being used to scan traffic.

Discussion 0

Correct Answer: C,D Vote an answer

Question 5

Which technology is used with IPsec for spoke-to-spoke connectivity in a Secure Private Access (SPA) with SD-WAN deployment?

A. EBGP B. EVPN C. OVTEP D. ADVPN

Discussion 0

Correct Answer: D Vote an answer

Question 6

Which two additional components does FortiSASE use for application control to act as an inline-CASB? (Choose two.)

A. SSL deep inspection B. DNS filter C. intrusion prevention system (IPS) D. Web filter with inline-CASB

Discussion 0

Correct Answer: A,C Vote an answer