View all questions & answers for the FCSS - FortiSASE 25 Administrator Exam Materials exam


Question 19 Discussion

What are two benefits of deploying FortiSASE with FortiGate ZTNA access proxy? (Choose two answers)

  • A. It offers data center redundancy.
  • B. The on-premises FortiGate performs a device posture check.
  • C. It is ideal for latency-sensitive applications.
  • D. It supports both agentless ZTNA and agent-based ZTNA.
Correct Answer: B,D

Brave-Dump Clients Votes

BD 50%
C 25%
BC 25%

Comments



Mbuh Mbuh 2025-06-26 22:24:49

Selected Answers: B, D


Please Confirm:
FortiSASE with FortiGate ZTNA access proxy supports agent-based ZTNA. FortiSASE leverages FortiClient agents installed on remote endpoints to enable secure access to private applications and resources hosted behind a FortiGate. This setup allows for per-session user authentication and a direct path to private resources, enhancing both security and performance.
FortiSASE with FortiGate ZTNA access proxy supports agentless ZTNA for accessing private applications. This allows secure access to applications for users on unmanaged devices (like BYOD or contractor devices) without requiring the FortiClient agent.

Proxy adds some overhead, so it’s not primarily optimized for ultra-low-latency applications.

Jo 2025-07-30 00:27:42

Selected Answers: B, D


This is a tough one. But I vote B D
B is obvious, FG performs a posture check for devices with EMS.
D - SPA is supported with on-premise apps on both agent and agentless.

C - Since you can use agent/agentless - if using agentless ZTNA, you must go through SASE POPs which isn't optimized for latency.

Al 2025-12-12 05:20:25

Selected Answers: C


This use case offers a direct (shortest) path to private resources and per-session user authentication thus offering greater performance and security. ZTNA has the following requirements:
A FortiGate must be located at an organization’s headquarters data center (on-premises, private cloud, or public cloud) and configured as a ZTNA access proxy that controls access to resources behind the FortiGate

Al 2025-12-12 05:22:23

Selected Answers: B, C


Architecture guide the ztna use case with fgt as ztna access proxy offers direct shortest path, better performance on page 20.