FCSS_SASE_AD-25 Exam Dumps - FCSS - FortiSASE 25 Administrator

security posture tags

application inventory

user verification

device identification

Configure a network lockdown policy on the endpoint profiles.

Configure a geography address object as the source for a deny policy.

Configure geofencing to restrict access from the required countries.

Configure source IP anchoring to restrict access from the specified countries.

sanctioned and unsanctioned Software-as-a-Service (SaaS) applications usage

FortiClient vulnerability assessment

SD-WAN performance

FortiSASE administrator and system events

Certificate inspection is not being used to scan application traffic.

Deep inspection is not being used to scan traffic.

The private access policy must be to set to log Security Events.

The inline-CASB application control profile does not have application categories set to Monitor.

FortiSASE runs a ping from the endpoint to calculate the TTL to the SaaS application.

FortiSASE runs SNMP traps to the endpoint using the DEM agent to verify the SaaS application health status.

FortiSASE runs a netstat from the endpoint to the SaaS application to see if ports are open.

FortiSASE runs a trace job on the endpoint using the DEM agent to the Software-as-a-Service (SaaS) application.

It provides end-to-end network visibility from all the FortiSASE security PoPs to a specific SaaS application.

It gathers all the vulnerability information from all the FortiClient endpoints.

It is used for performing device compliance checks on endpoints.

It monitors the FortiSASE POP health based on ping probes.

Use zero trust network access (ZTNA) and tag the client as an unmanaged endpoint.

Use the self-registration portal on FortiSASE to grant internet access.

Use a tunnel policy with a contractors user group as the source on FortiSASE to provide internet access.

Use a proxy auto-configuration (PAC) file and provide secure web gateway (SWG) service as an explicit web proxy.