Which policy type is used to control traffic between the FortiClient endpoint to FortiSASE for secure internet access?

1. A. VPN policy
2. B. thin edge policy
3. C. private access policy
4. D. secure web gateway (SWG) policy

Correct Answer: A

Which statement best describes the Digital Experience Monitor (DEM) feature on FortiSASE?

1. A. It provides end-to-end network visibility from all the FortiSASE security PoPs to a specific SaaS application.
2. B. It can be used to request a detailed analysis of the endpoint from the FortiGuard team.
3. C. It requires a separate DEM agent to be downloaded from the FortiSASE portal and installed on the endpoint.
4. D. It can help IT and security teams ensure consistent security monitoring for remote users.

Correct Answer: A
TheDigital Experience Monitor (DEM)feature in FortiSASE is designed to provideend-to-end network visibilityby monitoring the performance and health of connections between FortiSASE security Points of Presence (PoPs) and specific SaaS applications. This ensures that administrators can identify and troubleshoot issues related to latency, jitter, packet loss, and other network performance metrics that could impact user experience when accessing cloud-based services.
Here??s why the other options are incorrect:
✑ B. It can be used to request a detailed analysis of the endpoint from the FortiGuard team:This is incorrect because DEM focuses on network performance monitoring, not endpoint analysis. Endpoint analysis would typically involve tools like FortiClient or FortiEDR, not DEM.
✑ C. It requires a separate DEM agent to be downloaded from the FortiSASE portal and installed on the endpoint:This is incorrect because DEM operates at the network level and does not require an additional agent to be installed on endpoints.
✑ D. It can help IT and security teams ensure consistent security monitoring for remote users:While DEM indirectly supports security by ensuring optimal network performance, its primary purpose is to monitor and improve the digital experience rather than enforce security policies.
References:
✑ Fortinet FCSS FortiSASE Documentation - Digital Experience Monitoring Overview
✑ FortiSASE Administration Guide - Configuring DEM
================

Which two deployment methods are used to connect a FortiExtender as a FortiSASE LAN extension? (Choose two.)

1. A. Connect FortiExtender to FortiSASE using FortiZTP
2. B. Enable Control and Provisioning Wireless Access Points (CAPWAP) access on the FortiSASE portal.
3. C. Enter the FortiSASE domain name in the FortiExtender GUI as a static discovery server
4. D. Configure an IPsec tunnel on FortiSASE to connect to FortiExtender.

Correct Answer: AC
There are two deployment methods used to connect a FortiExtender as a FortiSASE LAN extension:
✑ Connect FortiExtender to FortiSASE using FortiZTP:
✑ Enter the FortiSASE domain name in the FortiExtender GUI as a static discovery server:
References:
✑ FortiOS 7.2 Administration Guide: Details on FortiExtender deployment methods and configurations.
✑ FortiSASE 23.2 Documentation: Explains how to connect and configure FortiExtender with FortiSASE using FortiZTP and static discovery.