Fortinet FCSS FortiSASE 23 Administrator - FCSS_SASE

QUESTION NO: 1
Refer to the exhibits.

A FortiSASE administrator is trying to configure FortiSASE as a spoke to a FortiGate hub. The VPN tunnel does not establish Based on the provided configuration, what configuration needs to be modified to bring the tunnel up?

A. The hub needs IKEv2 enabled in the IPsec phase 1 settings. B. FortiSASE spoke devices do not support mode config. C. The BGP router ID needs to match on the hub and FortiSASE. D. NAT needs to be enabled in the Spoke-to-Hub firewall policy.

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 2
Which policy type is used to control traffic between the FortiClient endpoint to FortiSASE for secure internet access?

A. thin edge policy B. private access policy C. secure web gateway (SWG) policy D. VPN policy

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 3
Refer to the exhibits.

A FortiSASE administrator is trying to configure FortiSASE as a spoke to a FortiGate hub. The tunnel is up to the FortiGale hub. However, the administrator is not able to ping the webserver hosted behind the FortiGate hub.
Based on the output, what is the reason for the ping failures?

A. Network address translation (NAT) is not enabled on the spoke-to-hub policy. B. Quick mode selectors are restricting the subnet. C. The BGP route is not received. D. The Secure Private Access (SPA) policy needs to allow PING service.

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 4
Which two components are part of onboarding a secure web gateway (SWG) endpoint? (Choose two)

A. FortiClient installer B. FortiSASE invitation code C. proxy auto-configuration (PAC) file D. FortiSASE CA certificate

Correct Answer: C,D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

Fortinet FCSS FortiSASE 23 Administrator - FCSS_SASE_AD-23 Exam Questions