Fortinet NSE7_SSE_AD-25 問題集

質問 1：
An organization must block user attempts to log in to non-company resources while using Microsoft Office 365 to prevent users from accessing unapproved cloud resources.
Which FortiSASE feature can you implement to meet this requirement?
A. DNS filter with domain filter
B. web filter with inline-CASB
C. data loss prevention (DLP) with Microsoft Purview Information Protection (MPIP)
D. application control with inline-CASB
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
A FortiSASE administrator is receiving reports that some users have travelled overseas and cannot establish their agent-based VPN tunnels, although they can authenticate with their SSO credentials to access 0365 and SFDC directly. The administrator reviewed the firewall policies and ZTNA tags of some users and could not find anything unusual. Which action can the administrator take to resolve this problem?
A. Instruct the users to install the updated version of the agent-based client.
B. Instruct the users to restart their laptops and log in again.
C. Ensure that the countries the users are visiting are not listed under the Deny list in the Geofencing settings.
D. Create a dedicated firewall policy for the users.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
For monitoring potentially unwanted applications on endpoints, which information is available on the FortiSASE software installations page? (Choose two.)
A. the license status of the software
B. the usage frequency of the software
C. the endpoint the software is installed on
D. the vendor of the software
正解：C,D

質問 4：
What happens to the logs on FortiSASE that are older than the configured log retention period?
A. The logs are compressed and archived.
B. The logs are backed up on FortiCloud.
C. The logs are deleted from FortiSASE.
D. The logs are indexed and can be stored in a SQL database.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Refer to the exhibit. An endpoint profile configured by a customer is shown.
A workstation user reports that after installing and connecting the FortiSASE client, they no longer have access to their local home network printers. The customer On-net rule set is mapped to the office public IP address.
What the customer needs to enable so the user can use the local network printer at home?

A. The customer should enable Allow local LAN access when endpoint is off-net.
B. The customer should disable Lockdown endpoint when off-net.
C. The customer must create a new firewall policy to give the user access to the local subnet.
D. The customer should increase the Grace period to allow the user to print immediately after booting the computer.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Refer to the exhibit. A customer configured the On/off-net detection rule to disable FortiSASE VPN auto-connect when users are inside the corporate network. The rule is set to Connects with a known public IP using the company's public IP address. However, when the users are on the corporate network, the FortiSASE VPN still auto-connects. The customer has confirmed that traffic is going to the internet with the correct IP address.
Which configuration is causing the issue?


A. Is connected to a known DNS server should be enabled and configured.
B. Exempt endpoint from FortiSASE auto-connect is disabled when it should be enabled.
C. Allow local LAN access when endpoint is on-net is disabled when it should be enabled.
D. The On-net rule set configuration is incorrect.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Refer to the exhibits. How will the application vulnerabilities be patched, based on the exhibits provided?


A. An administrator will patch the vulnerability remotely using FortiSASE.
B. The end user will patch the vulnerabilities using the FortiClient software.
C. The vulnerability will be patched automatically based on the endpoint profile configuration.
D. The vulnerability will be patched by installing the patch from the vendor's website.
正解：A
解説: (Topexam メンバーにのみ表示されます)