NSE7_SSE_AD-25

NSE7_SSE_AD-25 practice questions, page 3 of 3, with answer review and explanations.

Question 11

Refer to the exhibit.A customer needs to implement device posture checks for their remote endpoints while accessing the protected server. They also want the TCP traffic between the remote endpoints and the protected servers to be processed by FortiGate.In this scenario, which two setups will achieve these requirements? (Choose two.)

  1. Configure ZTNA tags on FortiGate.
  2. Configure FortiGate as a zero trust network accesss (ZTNA) access proxy.
  3. Configure ZTNA servers and ZTNA policies on FortiGate.
  4. Configure private access policies on FortiSASE with ZTNA.

Question 12

A AFortiSASE customer has been enforcing always-on VPN for their remote-users running FortiClient.What option can be enabled under the customer’s Endpoint Profile o allow them access different resources located in the same L2 network?

  1. Allow local LAN Access into user Endpoint Profile before they get connected to the VPN
  2. Endpoint Sandbox protection for VPN users
  3. Endpoint Anti-Virus protection in the Endpoint Profile for VPN
  4. Network Lockdown for endpoints with VPN enabled