Question 1

An organization needs to resolve internal hostnames using its internal rather than public DNS servers for remotely connected endpoints. Which two components must be configured on FortiSASE to achieve this? (Choose two.)

Options :

A : SSL deep inspection

B : Split DNS rules

C : Split tunnelling destinations

D : DNS filter

Answer: B,C

Question 2

Which policy type is used to control traffic between the FortiClient endpoint to FortiSASE for secure internet access?

Options :

A : VPN policy

B : thin edge policy

C : private access policy

D : secure web gateway (SWG) policy

Answer: D

Question 3

You have configured FortiSASE Secure Private Access (SPA) deployment. Which statement is true about traffic flows? (Choose two answers)

Options :

A : When using SD-WAN private access, traffic goes from an endpoint directly to an SPA hub.

B : When using zero trust network access, traffic goes from an endpoint to a FortiSASE POP, and then to aZTNA access proxy.

C : When using zero trust network access (ZTNA) traffic goes from an endpoint directly to a ZTNA accessproxy.

D : When using SD-WAN private access, traffic goes from an endpoint to a FortiSASE POP, and then to anSPA hub.

Answer: C,D

Question 4

Refer to the exhibits.How will the application vulnerabilities be patched, based on the exhibits provided? (Choose one answer)

Options :

A : An administrator will patch the vulnerability remotely using FortiSASE.

B : The end user will patch the vulnerabilities using the FortiClient software.

C : The vulnerability will be patched by installing the patch from the vendor's website.

D : The vulnerability will be patched automatically based on the endpoint profile configuration.

Answer: A

Question 5

Refer to the exhibit.Which type of information or actions are available to a FortiSASE administrator from the following output? (Choose one answer)

Options :

A : Administrators can view and configure endpoint profiles and ZTNA tags.

B : Administrators can view and configure automatic patching of endpoints, and first detected date forapplications.

C : Administrators can view latest application version available and push updates to managed endpoints.

D : Administrators can view application details, such as vendor, version, and installation dates to identifyunwanted or outdated software.

Answer: D