Free Fortinet FCSS_SASE_AD-23 Exam Dumps Questions & Answers

When you configure FortiSASE Secure Private Access (SPA) with SD-WAN integration, you must establish a routing adjacency between FortiSASE and the FortiGate SD-WAN hub. Which routing protocol must you use?

• A.IS-IS
• B.EIGRP
• C.OSPF
• D.BGP

Refer to the exhibit.

To allow access, which web tiller configuration must you change on FortiSASE?

• A.FortiGuard category-based filter
• B.URL Filter
• C.inline cloud access security broker (CASB) headers
• D.content filter

Which secure internet access (SIA) use case minimizes individual workstation or device setup, because you do not needto install FortiClient on endpoints or configure explicit web proxy settings on web browser-based end points?

• A.SIA for inline-CASB users
• B.SIA for agentless remote users
• C.SIA for site-based remote users
• D.SIA for SSLVPN remote users

Refer to the exhibits.





A FortiSASE administrator is trying to configure FortiSASE as a spoke to a FortiGate hub. The VPN tunnel does not establish Based on the provided configuration, what configuration needs to be modified to bring the tunnel up?

• A.The BGP router ID needs to match on the hub and FortiSASE.
• B.NAT needs to be enabled in the Spoke-to-Hub firewall policy.
• C.FortiSASE spoke devices do not support mode config.
• D.The hub needs IKEv2 enabled in the IPsec phase 1 settings.

When accessing the FortiSASE portal for the first time, an administrator must select data center locations for which three FortiSASE components? (Choose three.)

• A.SD-WAN hub
• B.Authentication
• C.Points of presence
• D.Logging
• E.Endpoint management