السؤال #1

Which statement describes the FortiGuard forensics analysis feature on FortiSASE?

A. It is a 24x7x365 monitoring service of your FortiSASE environment

B. It can monitor endpoint resources in real-time

C. It can help troubleshoot user-to-application performance issues

D. It can help customers identify and mitigate potential risks to their network

عرض الإجابة

اجابة صحيحة: D

السؤال #2

Refer to the exhibits.A FortiSASE administrator has configured an antivirus profile in the security profile group and applied it to the internet access policy. Remote users are still able to download the eicar.com-zip file from https://eicar.org. Traffic logs show traffic is allowed by the policy. Which configuration on FortiSASE is allowing users to perform the download?

A. Web filter is allowing the traffic

B. IPS is disabled in the security profile group

C. The HTTPS protocol is not enabled in the antivirus profile

D. Force certificate inspection is enabled in the policy

عرض الإجابة

اجابة صحيحة: D

السؤال #3

Which FortiOS command is used to display the current SD-WAN rules in place for traffic distribution?

A. get router info routing-table all

B. diagnose sys sdwan statuscorrect

C. get sdwan

D. config system sdwan

عرض الإجابة

اجابة صحيحة: B

السؤال #4

Refer to the exhibit. To allow access, which web tiller configuration must you change on FortiSASE?

A. inline cloud access security broker (CASB) headers

B. FortiGuard category-based filter

C. URL Filter

D. content filter

عرض الإجابة

اجابة صحيحة: D

السؤال #5

A FortiSASE administrator is configuring a Secure Private Access (SPA) solution to share endpoint information with a corporate FortiGate. Which three configuration actions will achieve this solution? (Choose three.)

A. Add the FortiGate IP address in the secure private access configuration on FortiSASE

B. Use the FortiClient EMS cloud connector on the corporate FortiGate to connect to FortiSASE

C. Register FortiGate and FortiSASE under the same FortiCloud account

D. Authorize the corporate FortiGate on FortiSASE as a ZTNA access proxy

E. Apply the FortiSASE zero trust network access (ZTNA) license on the corporate FortiGate

عرض الإجابة

اجابة صحيحة: BCD

السؤال #6

Refer to the exhibits.Antivirus is installed on a Windows 10 endpoint, but the windows application firewall is stopping it from running.What will the endpoint security posture check be?

A. FortiClient will block the endpoint from getting access to the network

B. FortiClient telemetry will be disconnected because of failed compliance

C. FortiClient will tag the endpoint as FortiSASE-Non-Compliant

D. FortiClient will prompt the user to enable antivirus

عرض الإجابة

اجابة صحيحة: A

السؤال #7

Which command is used in FortiOS to generate a report on real-time security events in FortiSASE?

A. get security-event report

B. execute report generate

C. diagnose sys security-event reportcorrect

D. get system status

عرض الإجابة

اجابة صحيحة: C

السؤال #8

What should be considered when deploying FortiSASE to integrate with existing security infrastructures? (Select all that apply)

A. Compatibility with existing firewallscorrect

B. Integration with identity management systemscorrect

C. Number of remote access users

D. Existing network topologycorrect

عرض الإجابة

اجابة صحيحة: ABD

السؤال #9

In the context of analyzing security issues, what does a sudden spike in user traffic indicate when reviewed in reports?

A. A potential distributed denial of service (DDoS) attackcorrect

B. A planned upgrade of internet services

C. A decrease in user productivity

D. A social event in the organization

عرض الإجابة

اجابة صحيحة: A

السؤال #10

Refer to the exhibits. A FortiSASE administrator is trying to configure FortiSASE as a spoke to a FortiGate hub. The tunnel is up to the FortiGate hub. However, the administrator is not able to ping the Webserver hosted behind the FortiGate hub. Based on the output, what is the reason for the ping failures?

A. The Secure Private Access (SPA) policy needs to allow PING service

B. Quick mode selectors are restricting the subnet

C. The BGP route is not received

D. Network address translation (NAT) is not enabled on the spoke-to-hub policy

عرض الإجابة

اجابة صحيحة: C

السؤال #11

Which FortiOS command is used to display the current SD-WAN rules in place for traffic distribution?

A. get router info routing-table all

B. diagnose sys sdwan statuscorrect

C. get sdwan

D. config system sdwan

عرض الإجابة

اجابة صحيحة: B

السؤال #12

What should be considered when deploying FortiSASE to integrate with existing security infrastructures? (Select all that apply)

A. Compatibility with existing firewallscorrect

B. Integration with identity management systemscorrect

C. Number of remote access users

D. Existing network topologycorrect

عرض الإجابة

اجابة صحيحة: ABD

السؤال #13

Which feature of Secure Internet Access (SIA) within FortiSASE is critical for protecting users from malicious web content?

A. Content filteringcorrect

B. Load balancing

C. Network segmentation

D. Bandwidth throttling

عرض الإجابة

اجابة صحيحة: A

السؤال #14

Which three ways does FortiSASE provide Secure Private Access (SPA) to corporate, non-web applications? (Choose three.)

A. Using SD-WAN technologycorrect

B. Using secure web gateway (SWG)

C. Using zero trust network access (ZTNA) technologycorrect

D. Using digital experience monitoring

E. Using next generation firewall (NGFW)correct

عرض الإجابة

اجابة صحيحة: ACE

السؤال #15

What benefit does FortiSASE’s Secure Internet Access (SIA) offer for compliance with security policies?

A. Automated updates of all network devices

B. Centralized management of user sessions

C. Consistent enforcement of security policies across all userscorrect

D. Increased network speed for remote users

عرض الإجابة

اجابة صحيحة: C

السؤال #16

Which FortiOS command is used to verify the health of Zero Trust Network Access (ZTNA) policies in FortiSASE?

A. diagnose ztna status

B. get system ztna status

C. diagnose debug application ztnacorrect

D. get ztna policy-status

عرض الإجابة

اجابة صحيحة: C

السؤال #17

Refer to the exhibits.When remote users connected to FortiSASE require access to internal resources on Branch-2. how will traffic be routed?

A. FortiSASE will use the SD-WAN capability and determine that traffic will be directed to HUB-2

B. FortiSASE will use the AD VPN protocol and determine that traffic will be directed to Branch-2 directly, using a static route

C. FortiSASE will use the SD-WAN capability and determine that traffic will be directed to HUB-1, which will then route traffic to Branch-2

D. FortiSASE will use the AD VPN protocol and determine that traffic will be directed to Branch-2 directly, using a dynamic route

عرض الإجابة

اجابة صحيحة: D

السؤال #18

Which logs are critical for identifying security incidents in FortiSASE?

A. Debug level logs

B. Error and event logscorrect

C. User activity logs

D. Server room temperature logs

عرض الإجابة

اجابة صحيحة: B

السؤال #19

An organization wants to block all video and audio application traffic but grant access to videos from CNN. Which application override action must you configure in the Application Control with Inline-CASB?

A. Allow

B. Pass

C. Permit

D. Exempt

عرض الإجابة

اجابة صحيحة: A

السؤال #20

How does FortiSASE support Zero Trust Network Access (ZTNA)?

A. By enforcing network-level security policies

B. By managing user credentials centrally

C. By providing application-level access controlscorrect

D. By encrypting all network traffic

عرض الإجابة

اجابة صحيحة: C

السؤال #21

Which FortiSASE feature is essential for real-time threat detection?

A. Scheduled security updates

B. Dashboard configuration

C. Real-time log analysiscorrect

D. Device management

عرض الإجابة

اجابة صحيحة: C

السؤال #22

Which security profiles can be applied within FortiSASE for content inspection? (Select all that apply)

A. Web filtering profilescorrect

B. Data Loss Prevention (DLP) profilescorrect

C. Antivirus profilescorrect

D. Load balancing profiles

عرض الإجابة

اجابة صحيحة: ABC

السؤال #23

Refer to the exhibits. A FortiSASE administrator has configured an antivirus profile in the security profile group and applied it to the internet access policy. Remote users are still able to download the eicar.com - zip file from https//eicar.org. Traffic logs show traffic is allowed by the policy. Which configuration on FortiSASE is allowing users to perform the download?

A. Web filter is allowing the traffic

B. IPS is disabled in the security profile group

C. The HTTPS protocol is not enabled in the antivirus profile

D. Force certificate inspection is enabled in the policy

عرض الإجابة

اجابة صحيحة: A

السؤال #24

An organization wants to block all video and audio application traffic but grant access to videos from CNN Which application override action must you configure in the Application Control with Inline - CASB?

A. Allow

B. Pass

C. Permit

D. Exempt

عرض الإجابة

اجابة صحيحة: D

السؤال #25

Which FortiOS command is used to view the log settings configured in FortiSASE?

A. get log settings

B. diagnose debug log

C. get system log settingscorrect

D. config log settings view

عرض الإجابة

اجابة صحيحة: C

السؤال #26

An organization wants to block all video and audio application traffic but grant access to videos from CNN Which application override action must you configure in the Application Control with Inline- CASB?

A. Allow

B. Pass

C. Permit

D. Exempt

عرض الإجابة

اجابة صحيحة: D

السؤال #27

Which logs are critical for identifying security incidents in FortiSASE?

A. Debug level logs

B. Error and event logscorrect

C. User activity logs

D. Server room temperature logs

عرض الإجابة

اجابة صحيحة: B

السؤال #28

FortiSASE delivers a converged networking and security solution. Which two features help with integrating FortiSASE into an existing network? (Choose two.)

A. SD-WANcorrect

B. remote browser isolation (RBI)

C. security, orchestration, automation, and response (SOAR)

D. zero trust network access (ZTNA)correct

عرض الإجابة

اجابة صحيحة: AD

السؤال #29

Which security profiles can be applied within FortiSASE for content inspection? (Select all that apply)

A. Web filtering profilescorrect

B. Data Loss Prevention (DLP) profilescorrect

C. Antivirus profilescorrect

D. Load balancing profiles

عرض الإجابة

اجابة صحيحة: ABC

السؤال #30

Which reports are critical for analyzing user traffic in FortiSASE? (Select all that apply)

A. Peak usage timescorrect

B. Potential security breachescorrect

C. Number of devices connected

D. User login timescorrect

عرض الإجابة

اجابة صحيحة: ABD

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان

View The Updated Fortinet Exam Questions

عرض الإجابات بعد التقديم

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع! احصل الان

View The Updated Fortinet Exam Questions

عرض الإجابات بعد التقديم

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان