Explain FortiSASE Administration and User Onboarding Methods NSE4-FORTIOS-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   A company wants to provide secure internet access and threat protection for IoT devices in its branch offices. Which FortiSASE use case does this scenario represent?

   • AManaging software updates for IoT devices
   • BSecuring remote users
   • CReplacing the corporate data center
   • DSecuring IoT devices
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A regional bank has 200 remote loan officers who frequently travel between branches and client sites. They use a mix of corporate laptops and personal tablets. The bank's compliance team requires that all internet traffic from these users be inspected for malware and that access to internal loan-processing applications be restricted to authenticated users regardless of the device or location. The bank has no existing VPN concentrator capacity for this scale. What should the administrator configure to meet these requirements with the least operational overhead?

   • AInstall FortiClient on every corporate laptop and configure IPsec VPN tunnels to the branch office FortiGate for all traffic.
   • BDeploy FortiSASE with secure web gateway (SWG) for internet traffic and zero trust network access (ZTNA) for the loan-processing application, onboarding users via SSO integration.
   • CEnable FortiSASE firewall-as-a-service only, and manually create a local user account for each of the 200 employees.
   • DConfigure a site-to-site IPsec VPN between each branch and the data center, and require users to be physically present at a branch.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company has deployed FortiSASE with SWG and ZTNA. The security team wants to ensure that all traffic to a newly acquired SaaS application is inspected by the SWG, but the application is accessed directly by users without going through FortiSASE. What is the most likely reason the traffic is bypassing FortiSASE?

   • AThe DLP policy is preventing the application from loading.
   • BThe users are not authenticated via SSO.
   • CThe ZTNA policy is blocking the SaaS application.
   • DThe users' devices are not configured to route traffic through the FortiSASE POP, or the SWG policy does not include the application's domain.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company with 200 remote users and 10 branch offices wants to migrate from a traditional VPN to FortiSASE. The branch offices currently have FortiGate devices that are underutilized. The company wants to reduce WAN costs by breaking out internet traffic locally at branches while still enforcing security policies. Which deployment approach best balances cost and security?

   • AReplace all branch FortiGates with FortiSASE and route all branch traffic through the cloud.
   • BDeploy FortiSASE at branches and keep the VPN for remote users.
   • CUse the existing branch FortiGates for local internet breakout with security profiles, and use FortiSASE for remote users only.
   • DKeep the current VPN concentrator and add FortiSASE for remote users only.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A healthcare organization needs to provide remote clinicians with access to a specific electronic health record (EHR) web application hosted in a private data center. The clinicians use unmanaged personal devices. The security team requires that no EHR data be cached on the devices and that access be granted only after multi-factor authentication. Which FortiSASE component combination meets these requirements?

   • AFirewall-as-a-service (FWaaS) with a broad allow-all policy for the EHR application's IP range.
   • BZTNA with identity-based access control and a data loss prevention (DLP) profile that blocks download and copy actions.
   • CSecure web gateway (SWG) with URL filtering only, and no additional access controls.
   • DSite-to-site VPN from the personal devices to the data center with no additional security profiles.
   Reveal Solution Discussion Select an answer first