FCSS_SASE_AD-24 Exam Questions and Answers

QUESTION: 6

Refer to the exhibit.

To allow access, which web tiller configuration must you change on FortiSASE?

FortiGuard category-based filter
content filter
URL Filter
inline cloud access security broker (CASB) headers

Answer(s): B

Reveal Solution Next Question

QUESTION: 7

Which policy type is used to control traffic between the FortiClient endpoint to FortiSASE for secure internet access?

VPN policy
thin edge policy
private access policy
secure web gateway (SWG) policy

Answer(s): A

Reveal Solution Next Question

QUESTION: 8

Which role does FortiSASE play in supporting zero trust network access (ZTNA) principles9

It offers hardware-based firewalls for network segmentation.
It integrates with software-defined network (SDN) solutions.
It can identify attributes on the endpoint for security posture check.
It enables VPN connections for remote employees.

Answer(s): C

Explanation:

FortiSASE supports zero trust network access (ZTNA) principles by identifying attributes on the endpoint for security posture checks. ZTNA principles require continuous verification of user and device credentials, as well as their security posture, before granting access to network resources.
Security Posture Check:
FortiSASE can evaluate the security posture of endpoints by checking for compliance with security policies, such as antivirus status, patch levels, and configuration settings. This ensures that only compliant and secure devices are granted access to the network.
Zero Trust Network Access (ZTNA):
ZTNA is based on the principle of "never trust, always verify," which requires continuous assessment of user and device trustworthiness.
FortiSASE plays a crucial role in implementing ZTNA by performing these security posture checks and enforcing access control policies.

Reference:

FortiOS 7.2 Administration Guide: Provides information on ZTNA and endpoint security posture checks.
FortiSASE 23.2 Documentation: Details on how FortiSASE implements ZTNA principles.

Reveal Solution Next Question

QUESTION: 9

When deploying FortiSASE agent-based clients, which three features are available compared to an agentless solution? (Choose three.)

Vulnerability scan
SSL inspection
Anti-ransomware protection
Web filter
ZTNA tags

Answer(s): A,C,E

Reveal Solution Next Question

QUESTION: 10

Which FortiSASE feature ensures least-privileged user access to all applications?

secure web gateway (SWG)
SD-WAN
zero trust network access (ZTNA)
thin branch SASE extension

Answer(s): C

Explanation:

Zero Trust Network Access (ZTNA) is the FortiSASE feature that ensures least-privileged user access to all applications. ZTNA operates on the principle of "never trust, always verify," providing secure access based on the identity of users and devices, regardless of their location.
Zero Trust Network Access (ZTNA):
ZTNA ensures that only authenticated and authorized users and devices can access applications. It applies the principle of least privilege by granting access only to the resources required by the user, minimizing the potential for unauthorized access.
Implementation:
ZTNA continuously verifies user and device trustworthiness and enforces granular access control policies.
This approach enhances security by reducing the attack surface and limiting lateral movement within the network.

Reference:

FortiOS 7.2 Administration Guide: Provides detailed information on ZTNA and its role in ensuring least-privileged access.
FortiSASE 23.2 Documentation: Explains the implementation and benefits of ZTNA within the FortiSASE environment.

Reveal Solution Next Question

Fortinet FCSS_SASE_AD-24 Exam (page: 2) Fortinet FCSS - FortiSASE 24 Administrator Updated on: 12-Feb-2026

QUESTION: 6

QUESTION: 7

QUESTION: 8

Explanation:

Reference:

QUESTION: 9

QUESTION: 10

Explanation:

Reference:

Fortinet FCSS_SASE_AD-24 Exam (page: 2)
Fortinet FCSS - FortiSASE 24 Administrator
Updated on: 12-Feb-2026