Which FortiSASE feature ensures least-privileged user access to corporate applications that are protected by an on-premises FortiGate?

1. A. Privileged access management (PAM)
2. B. role-based access control (RBAC)
3. C. Identity & access management (IAM)
4. D. zero trust network access (ZTNA)

Correct Answer: D

In which three ways does FortiSASE help organizations ensure secure access for remote workers? (Choose three.)

1. A. It enforces multi-factor authentication (MFA) to validate remote users.
2. B. It secures traffic from endpoints to cloud applications.
3. C. It uses the identity & access management (IAM) portal to validate the identities of remote workers.
4. D. It offers zero trust network access (ZTNA) capabilities.
5. E. It enforces granular access policies based on user identities.

Correct Answer: BDE

Which two deployment methods are used to connect a FortiExtender as a FortiSASE LAN extension? (Choose two.)

1. A. Connect FortiExtender to FortiSASE using FortiZTP
2. B. Enable Control and Provisioning Wireless Access Points (CAPWAP) access on the FortiSASE portal.
3. C. Enter the FortiSASE domain name in the FortiExtender GUI as a static discovery server
4. D. Configure an IPsec tunnel on FortiSASE to connect to FortiExtender.

Correct Answer: AC

A customer wants to upgrade their legacy on-premises proxy to a cloud-based proxy for a hybrid network. Which two FortiSASE features would help the customer achieve this outcome? (Choose two.)

1. A. Digital experience monitoring (DEM)
2. B. Zero trust network access (ZTNA)
3. C. Inhne-CASB
4. D. Secure web gateway (SWG)

Correct Answer: CD

Which secure internet access (SIA) use case minimizes individual endpoint configuration?

1. A. Site-based remote user internet access
2. B. Agentless remote user internet access
3. C. SIA for SSL VPN remote users
4. D. SIA using ZTNA

Correct Answer: B