Summer Special 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: bestdeal

Free Fortinet FCSS_SASE_AD-23 Practice Exam with Questions & Answers

Questions 1

When deploying FortiSASE agent-based clients, which three features are available compared to an agentless solution? (Choose three.)

Options:
A.

Vulnerability scan

B.

SSL inspection

C.

Anti-ransomware protection

D.

Web filter

E.

ZTNA tags

Fortinet FCSS_SASE_AD-23 Premium Access
Questions 2

A FortiSASE administrator is configuring a Secure Private Access (SPA) solution to share endpoint information with a corporate FortiGate.

Which three configuration actions will achieve this solution? (Choose three.)

Options:
A.

Add the FortiGate IP address in the secure private access configuration on FortiSASE.

B.

Use the FortiClient EMS cloud connector on the corporate FortiGate to connect to FortiSASE

C.

Register FortiGate and FortiSASE under the same FortiCloud account.

D.

Authorize the corporate FortiGate on FortiSASE as a ZTNA access proxy.

E.

Apply the FortiSASE zero trust network access (ZTNA) license on the corporate FortiGate.

Questions 3

Refer to the exhibit.

FCSS_SASE_AD-23 Question 3

The daily report for application usage shows an unusually high number of unknown applications by category.

What are two possible explanations for this? (Choose two.)

Options:
A.

Certificate inspection is not being used to scan application traffic.

B.

The inline-CASB application control profile does not have application categories set to Monitor

C.

Zero trust network access (ZTNA) tags are not being used to tag the correct users.

D.

Deep inspection is not being used to scan traffic.

Questions 4

When you configure FortiSASE Secure Private Access (SPA) with SD-WAN integration, you must establish a routing adjacency between FortiSASE and the FortiGate SD-WAN hub. Which routing protocol must you use?

Options:
A.

BGP

B.

IS-IS

C.

OSPF

D.

EIGRP

Questions 5

Which policy type is used to control traffic between the FortiClient endpoint to FortiSASE for secure internet access?

Options:
A.

VPN policy

B.

thin edge policy

C.

private access policy

D.

secure web gateway (SWG) policy

Questions 6

An organization needs to resolve internal hostnames using its internal rather than public DNS servers for remotely connected endpoints. Which two components must be configured on FortiSASE to achieve this? (Choose two.)

Options:
A.

SSL deep inspection

B.

Split DNS rules

C.

Split tunnelling destinations

D.

DNS filter

Questions 7

Which two components are part of onboarding a secure web gateway (SWG) endpoint? (Choose two)

Options:
A.

FortiSASE CA certificate

B.

proxy auto-configuration (PAC) file

C.

FortiSASE invitation code

D.

FortiClient installer

Questions 8

Refer to the exhibit.

FCSS_SASE_AD-23 Question 8

To allow access, which web tiller configuration must you change on FortiSASE?

Options:
A.

FortiGuard category-based filter

B.

content filter

C.

URL Filter

D.

inline cloud access security broker (CASB) headers

Questions 9

An organization wants to block all video and audio application traffic but grant access to videos from CNN Which application override action must you configure in the Application Control with Inline-CASB?

Options:
A.

Allow

B.

Pass

C.

Permit

D.

Exempt

Exam Code: FCSS_SASE_AD-23
Certification Provider: Fortinet
Exam Name: FCSS-FortiSASE 23 Administrator
Last Update: Jul 15, 2025
Questions: 30
PDF + Testing Engine
$164.99
$66
Testing Engine
$124.99
$50
PDF (Q&A)
$104.99
$42

Fortinet Free Exams

Fortinet Free Exams
Access free Fortinet exam study guides and practice tests at Examstrack. Ensure your success with top-notch preparation resources at Examstrack.