Fortinet FCSS_SASE_AD-24 Practice Exams
Last updated on Oct 21,2026- Exam Code: FCSS_SASE_AD-24
- Exam Name: FCSS - FortiSASE 24 Administrator
- Certification Provider: Fortinet
- Latest update: Oct 21,2026
Question #11
What is the primary function of compliance rules in FortiSASE deployments?
- A . To monitor network speed
- B . To ensure devices are using the latest software
- C . To enforce legal and regulatory requirements on user data
- D . To optimize bandwidth usage
Correct Answer: C
Question #12
An organization must block user attempts to log in to non-company resources while using Microsoft Office 365 to prevent users from accessing unapproved cloud resources.
Which FortiSASE feature can you implement to achieve this requirement?
- A . Web Filter with Inline-CASB
- B . SSL deep inspection
- C . Data loss prevention (DLP)
- D . Application Control with Inline-CASB
Correct Answer: A
A
Explanation:
To block user attempts to log in to non-company resources while using Microsoft Office 365, the Web Filter with Inline-CASB feature in FortiSASE is the most appropriate solution. Inline-CASB (Cloud Access Security Broker) provides real-time visibility and control over cloud application usage. When combined with Web Filtering, it can enforce policies to restrict access to unauthorized or non-company resources within sanctioned applications like Microsoft Office 365. This ensures that users cannot access unapproved cloud resources while still allowing legitimate use of Office 365. Here’s why the other options are incorrect:
B. SSL deep inspection: While SSL deep inspection is useful for decrypting and inspecting encrypted traffic, it does not specifically address the need to block access to non-company resources within Office 365. It focuses on securing traffic rather than enforcing application-specific policies.
C. Data loss prevention (DLP): DLP is designed to prevent sensitive data from being leaked or exfiltrated. While it is a valuable security feature, it does not directly block access to non-company resources within Office 365.
D. Application Control with Inline-CASB: Application Control focuses on managing access to specific
applications rather than enforcing granular policies within an application like Office 365. Web Filter
with Inline-CASB is better suited for this use case.
Reference: Fortinet FCSS FortiSASE Documentation – Inline-CASB and Web Filtering FortiSASE Administration Guide – Securing Cloud Applications
A
Explanation:
To block user attempts to log in to non-company resources while using Microsoft Office 365, the Web Filter with Inline-CASB feature in FortiSASE is the most appropriate solution. Inline-CASB (Cloud Access Security Broker) provides real-time visibility and control over cloud application usage. When combined with Web Filtering, it can enforce policies to restrict access to unauthorized or non-company resources within sanctioned applications like Microsoft Office 365. This ensures that users cannot access unapproved cloud resources while still allowing legitimate use of Office 365. Here’s why the other options are incorrect:
B. SSL deep inspection: While SSL deep inspection is useful for decrypting and inspecting encrypted traffic, it does not specifically address the need to block access to non-company resources within Office 365. It focuses on securing traffic rather than enforcing application-specific policies.
C. Data loss prevention (DLP): DLP is designed to prevent sensitive data from being leaked or exfiltrated. While it is a valuable security feature, it does not directly block access to non-company resources within Office 365.
D. Application Control with Inline-CASB: Application Control focuses on managing access to specific
applications rather than enforcing granular policies within an application like Office 365. Web Filter
with Inline-CASB is better suited for this use case.
Reference: Fortinet FCSS FortiSASE Documentation – Inline-CASB and Web Filtering FortiSASE Administration Guide – Securing Cloud Applications
Question #13
How does integrating FortiSASE enhance security management in hybrid networks?
- A . By providing a single interface for monitoring both cloud and on-premises environments
- B . By reducing the need for physical security devices
- C . By automatically scaling resources based on traffic
- D . By eliminating the use of traditional firewalls
Correct Answer: A
Question #14
What are two requirements to enable the MSSP feature on FortiSASE? (Choose two.)
- A . Add FortiCloud premium subscription on the root FortiCloud account.
- B . Configure MSSP user accounts and permissions on the FortiSASE portal.
- C . Assign role-based access control (RBAC) to IAM users using FortiCloud IAM portal.
- D . Enable multi-tenancy on the FortiSASE portal.
Correct Answer: C, D
C, D
Explanation:
To enable the MSSP (Managed Security Service Provider) feature on FortiSASE, two key requirements must be met:
Assign role-based access control (RBAC) to IAM users using FortiCloud IAM portal (Option C): RBAC is essential for managing permissions and ensuring that different customers (tenants) have appropriate access levels. The FortiCloud Identity and Access Management (IAM) portal allows administrators to define roles and assign them to users, ensuring secure and granular control over resources.
Enable multi-tenancy on the FortiSASE portal (Option D): Multi-tenancy is a critical feature for MSSPs, as it allows them to manage multiple customer environments (tenants) from a single FortiSASE instance. Each tenant operates independently with its own configurations, policies, and reporting, while the MSSP retains centralized control. Here’s why the other options are incorrect:
C, D
Explanation:
To enable the MSSP (Managed Security Service Provider) feature on FortiSASE, two key requirements must be met:
Assign role-based access control (RBAC) to IAM users using FortiCloud IAM portal (Option C): RBAC is essential for managing permissions and ensuring that different customers (tenants) have appropriate access levels. The FortiCloud Identity and Access Management (IAM) portal allows administrators to define roles and assign them to users, ensuring secure and granular control over resources.
Enable multi-tenancy on the FortiSASE portal (Option D): Multi-tenancy is a critical feature for MSSPs, as it allows them to manage multiple customer environments (tenants) from a single FortiSASE instance. Each tenant operates independently with its own configurations, policies, and reporting, while the MSSP retains centralized control. Here’s why the other options are incorrect:
Question #15
What key metrics should be included in security dashboards in FortiSASE? (Select all that apply)
- A . Real-time traffic flow
- B . Historical bandwidth usage
- C . Comparative analysis of past and present data
- D . Device battery levels
Correct Answer: ABC
Question #16
Which FortiSASE feature can you use to see a list of Software-as-a-Service (SaaS) applications and health-check metrics for first-mile connectivity between the geographical points of presence (PoPs) provisioned for your FortiSASE instance and these SaaS applications?
- A . event logs
- B . digital experience monitoring DEM
- C . FortiView
- D . security logs
Correct Answer: B
Question #17
What is the primary purpose of FortiSASE logs in network security?
- A . To monitor user productivity
- B . To identify potential security threats
- C . To manage bandwidth usage
- D . To log internet speeds
Correct Answer: B
Question #18
Which statement best describes the Digital Experience Monitor (DEM) feature on FortiSASE?
- A . It provides end-to-end network visibility from all the FortiSASE security PoPs to a specific SaaS application.
- B . It can be used to request a detailed analysis of the endpoint from the FortiGuard team.
- C . It requires a separate DEM agent to be downloaded from the FortiSASE portal and installed on the endpoint.
- D . It can help IT and security teams ensure consistent security monitoring for remote users.
Correct Answer: A
A
Explanation:
The Digital Experience Monitor (DEM) feature in FortiSASE is designed to provide end-to-end network visibility by monitoring the performance and health of connections between FortiSASE security Points of Presence (PoPs) and specific SaaS applications. This ensures that administrators can identify and troubleshoot issues related to latency, jitter, packet loss, and other network performance metrics that could impact user experience when accessing cloud-based services. Here’s why the other options are incorrect:
B. It can be used to request a detailed analysis of the endpoint from the FortiGuard team: This is incorrect because DEM focuses on network performance monitoring, not endpoint analysis. Endpoint analysis would typically involve tools like FortiClient or FortiEDR, not DEM.
C. It requires a separate DEM agent to be downloaded from the FortiSASE portal and installed on the endpoint: This is incorrect because DEM operates at the network level and does not require an additional agent to be installed on endpoints.
D. It can help IT and security teams ensure consistent security monitoring for remote users: While DEM indirectly supports security by ensuring optimal network performance, its primary purpose is to monitor and improve the digital experience rather than enforce security policies.
Reference: Fortinet FCSS FortiSASE Documentation – Digital Experience Monitoring Overview FortiSASE Administration Guide – Configuring DEM
A
Explanation:
The Digital Experience Monitor (DEM) feature in FortiSASE is designed to provide end-to-end network visibility by monitoring the performance and health of connections between FortiSASE security Points of Presence (PoPs) and specific SaaS applications. This ensures that administrators can identify and troubleshoot issues related to latency, jitter, packet loss, and other network performance metrics that could impact user experience when accessing cloud-based services. Here’s why the other options are incorrect:
B. It can be used to request a detailed analysis of the endpoint from the FortiGuard team: This is incorrect because DEM focuses on network performance monitoring, not endpoint analysis. Endpoint analysis would typically involve tools like FortiClient or FortiEDR, not DEM.
C. It requires a separate DEM agent to be downloaded from the FortiSASE portal and installed on the endpoint: This is incorrect because DEM operates at the network level and does not require an additional agent to be installed on endpoints.
D. It can help IT and security teams ensure consistent security monitoring for remote users: While DEM indirectly supports security by ensuring optimal network performance, its primary purpose is to monitor and improve the digital experience rather than enforce security policies.
Reference: Fortinet FCSS FortiSASE Documentation – Digital Experience Monitoring Overview FortiSASE Administration Guide – Configuring DEM
Question #19
What benefit does integrating FortiSASE provide in a hybrid cloud environment?
- A . Enhanced physical security of data centers
- B . Seamless integration with existing on-premises security solutions
- C . Improved hardware performance
- D . Simplified compliance with international regulations
Correct Answer: B
Question #20
What are the advantages of using Secure SD-WAN in a FortiSASE environment? (Select all that apply)
- A . Improved application performance
- B . Reduced operational costs
- C . Enhanced physical security of endpoints
- D . Simplified routing management
Correct Answer: ABD