View all questions & answers for the NSE 7 - FortiSASE 25 Enterprise Administrator Exam Materials exam


Question 19 Discussion

Which two statements about FortiSASE Geofencing with regional compliance are true? (Choose two answers)

  • A. You can configure regional compliance on the security POP or the on-premises device, not both.
  • B. If no regional compliance rule is configured, the connection is made to the closest security POP.
  • C. A regional compliance rule can connect only to an on-premises device or only to a security POP.
  • D. The connection order for a regional compliance rule is always the security POP first, followed by the on-premises device.
Correct Answer: B,C

Brave-Dump Clients Votes

BC 100%

Comments



Brave-Dumps Admin 2025-10-30 13:06:14

Selected Answers: B, C


It needs additional check.

javaughn Bryan 2025-11-21 18:08:39

Selected Answers: B, C


B & C are correct.

B. If FortiSASE does not select a regional compliance rule, the remote user tries to connect to their closest FortiSASE security PoP.

FORTISASE offers only two options to connect—one at a time... not both:

C. On-premise device (gateway). FortiSASE does not manage this device’s configuration. Only FortiSASE instances enabled with SSL remote user support can use this connection type. Using this connection type for FortiSASE instances enabled with IPsec remote user support is not supported.

Security PoP. A security PoP is FortiSASE's managed security PoP in a specific region. Successful connection to this connection type establishes secure internet access (SIA).

ADMINISTRATION GUIDE: https://docs.fortinet.com/document/fortisase/latest/feature-administration-guide/869018/geofencing
Under #4