Fortinet FCSS_SASE_AD-24 Practice Exams
Last updated on Oct 21,2026- Exam Code: FCSS_SASE_AD-24
- Exam Name: FCSS - FortiSASE 24 Administrator
- Certification Provider: Fortinet
- Latest update: Oct 21,2026
Which onboarding methods should be used in FortiSASE for securing user access? (Select all that apply)
- A . Bulk user registration with secure credentials
- B . Individual user invitations
- C . Multi-Factor Authentication (MFA)
- D . Publicly available registration forms
When you configure FortiSASE Secure Private Access (SPA) with SD-WAN integration, you must establish a routing adjacency between FortiSASE and the FortiGate SD-WAN hub.
Which routing protocol must you use?
- A . BGP
- B . IS-IS
- C . OSPF
- D . EIGRP
A
Explanation:
When configuring FortiSASE Secure Private Access (SPA) with SD-WAN integration, establishing a routing adjacency between FortiSASE and the FortiGate SD-WAN hub requires the use of the Border Gateway Protocol (BGP).
BGP (Border Gateway Protocol):
BGP is widely used for establishing routing adjacencies between different networks, particularly in SD-WAN environments.
It provides scalability and flexibility in managing dynamic routing between FortiSASE and the FortiGate SD-WAN hub.
Routing Adjacency:
BGP enables the exchange of routing information between FortiSASE and the FortiGate SD-WAN hub. This ensures optimal routing paths and efficient traffic management across the hybrid network.
Reference: FortiOS 7.2 Administration Guide: Provides information on configuring BGP for SD-WAN integration. FortiSASE 23.2 Documentation: Details on setting up routing adjacencies using BGP for Secure Private Access with SD-WAN.
Which FortiSASE Secure Private Access (SPA) deployment involves installing FortiClient on remote endpoints?
- A . MicroBranch
- B . zero trust network access (ZTNA)
- C . secure web gateway (SWG)
- D . SD-WAN
Which two additional components does FortiSASE use for application control to act as an inline-CASB? (Choose two.)
- A . intrusion prevention system (IPS)
- B . SSL deep inspection
- C . DNS filter
- D . Web filter with inline-CASB
When configuring FortiSASE administration settings, which option is critical for ensuring compliance with data protection regulations?
- A . Enabling file sharing
- B . Setting up geographic restrictions
- C . Limiting the number of user sessions
- D . Disabling encryption
Which onboarding method is most effective for securely integrating a large number of remote users into FortiSASE?
- A . Individual user registration via email invitations
- B . Bulk user registration through automated scripts
- C . Open registration allowing user self-enrollment
- D . Temporary guest accounts with limited access
Secure SD-WAN in FortiSASE requires separate hardware to manage network traffic effectively.
- A . False
- B . True
What benefit does FortiSASE’s Secure Internet Access (SIA) offer for compliance with security policies?
- A . Automated updates of all network devices
- B . Centralized management of user sessions
- C . Consistent enforcement of security policies across all users
- D . Increased network speed for remote users
Which settings are essential for securing device compliance in FortiSASE? (Select all that apply)
- A . Enforcing regular software updates
- B . Configuring firewall rules on endpoints
- C . Limiting access based on device type
- D . Allowing guest access to secure resources
Refer to the exhibits.
When remote users connected to FortiSASE require access to internal resources on Branch-2. how will traffic be routed?
- A . FortiSASE will use the SD-WAN capability and determine that traffic will be directed to HUB-2. which will then route traffic to Branch-2.
- B . FortiSASE will use the AD VPN protocol and determine that traffic will be directed to Branch-2 directly, using a static route
- C . FortiSASE will use the SD-WAN capability and determine that traffic will be directed to HUB-1, which will then route traffic to Branch-2.
- D . FortiSASE will use the AD VPN protocol and determine that traffic will be directed to Branch-2 directly, using a dynamic route