fcss-sase认证

更新时间：试题数量：购买人数：提供作者：

有效期：个月

章节介绍：共有个章节

收藏

我的练习

我的错题
(0道)

我的收藏
(0道)

我的斩题
(0道)

我的笔记
(0道)

专项练习

顺序练习 练习进度 0 / 0

随机练习 自定义设置练习量

模拟考试 仿真模拟

题型练习 按题型分类练习

易错题 精选高频易错题

学习资料 考试学习相关信息

搜索

题库预览

How does FortiSASE hide user information when viewing and analyzing logs?

A company has a requirement to inspect all the endpoint internet traffic on FortiSASE,and exclude Google Maps traffic from the FortiSASE VPN tunnel and redirect it to the endpoint physical Interface. Which configuration must you apply to achieve this requirement?（含图）

Win10-Pro and Win7-Pro are endpoints from the same remote location.Win10-Pro can access the internet though FortiSASE,while Wm7-Pro can no longer access the internet Given the exhibits,which reason explains the outage on Wm7-Pro?（含图）

A customer wants to upgrade their legacy on-premises proxy to a could-based proxy for a hybrid network.Which FortiSASE features would help the customer to achieve this outcome?

When you configure FortiSASE Secure Private Access(SPA)with SD-WAN integration,you must establish a routing adjacency between FortiSASE and the FortiGate SD-WAN hub.Which routing protocol must you use?

A FortiSASE administrator is configuring a Secure Private Access(SPA)solution to share endpoint information with a corporate FortiGate.Which three configuration actions will achieve this solution?(Choose three.)

When viewing the daily summary report generated by FortiSASE,the administrator notices that the report contains very little data.What is a possible explanation for this almost empty report?

You are designing a new network for Company X and one of the new cybersecurity policy requirements is that all remote user endpoints must always be connected and protected.Which FortiSASE component facilitates this always-on security measure?

A FortiSASE administrator is trying to configure FortiSASE as a spoke to a FortiGate hub.The tunnel is up to the FortiGale hub.However,the administrator is not able to ping the webserver hosted behind the FortiGate hub. Based on the output,what is the reason for the ping failures?（含图）（含图）

To complete their day-to-day operations,remote users require access to a TCP-based application that is hosted on a private web server.Which FortiSASE deployment use case provides the most efficient and secure method for meeting the remote users'requirements?

Which secure internet access(SIA)use case minimizes individual workstation or device setup,because you do not need to install FortiClient on endpoints or configure explicit web proxy settings on web browser-based end points?

IPsec VPN configuration # show vpn ipsec phase1-interface To_SASE config vpn ipsec phase1-interface edit "To_SASE" set type dynamic set interface "wan1" set peertype any set net-device disable set mode-cfg enable set proposal aes128-sha256 aes256-sha256 aes128-sha1 aes256-sha1 set add-route disable set dpd on-idle set comments "VPN: To_SASE (Created by VPN wizard)" set wizard-type hub-fortigate-auto-discovery set auto-discovery-sender enable set ipv4-start-ip 10.11.11.10 set ipv4-end-ip 10.11.11.200 set ipv4-netmask 255.255.255.0 set psksecret ENC Sb10igpvIFFYSpRZ/hyxQVUXv9NZm7uq1tD9v+BVlPd+7RWizmUA3ZiYkPLkxaNwIo7VLlIipkye1xt84NAwEfM5jTqgf1dMj/phYvBI3hzU8yXq== next end # show vpn ipsec phase2-interface To_SASE config vpn ipsec phase2-interface edit "To_SASE" set phase1name "To_SASE" set proposal aes128-sha1 aes256-sha1 aes128-sha256 aes256-sha256 aes128g set comments "VPN: To_SASE (Created by VPN wizard)" next end BGP protocol configuration #config router bgp set as 65001 set router-id 10.1.0.254 config neighbor edit "10.10.1.3" set advertisement-interval 1 set ebgp-enforce-multihop enable set link-down-failover enable set remote-as 55001 set route-reflector-client enable next end config neighbor-group edit "To_SASE" set capability-graceful-restart enable set link-down-failover enable set next-hop-self enable set interface "To_SASE" set remote-as 55001 set additional-path both set adv-additional-path 4 set route-reflector-client enable next end config neighbor-range edit 1 set prefix 10.11.11.0 255.255.255.0 set neighbor-group "To_SASE" next end config network edit 1 set prefix 10.190.190.0 255.255.255.0 next end (缺图)【缺少答案，请补充】

A FortiSASE administrator is trying to configure FortiSASE as a spoke to a FortiGate hub.The VPN tunnel does not establish Based on the provided configuration,what configuration needs to be modified to bring the tunnel up?

Which two additional components does FortiSASE use for application control to act as an inline-CASB? (Choose two.)

Which two advantages does FortiSASE bring to businesses with multiple branch offices?(Choose two.)

When accessing the FortiSASE portal for the first time,an administrator must select data center locations for which three FortiSASE components?(Choose three.)

During FortiSASE provisioning,how many security points of presence(POPs)need to be configured by the FortiSASE administrator?

An organization needs to resolve internal hostnames using its internal rather than public DNS servers for remotely connected endpoints.Which two components must be configured on FortiSASE to achieve this? (Choose two.)

An endpoint is assigned an IP address of 192.168.13.101/24.Which action will be run on the endpoint? (Choose one answer)（含图）

A FortiSASE administrator has configured FortiSASE as a spoke to a FortiGate hub.The tunnel is up to the FortiGate hub.However,the remote FortiClient is not able to access the web server hosted behind the FortiGate hub. What is the reason for the access failure?（含图）