View all questions & answers for the NSE 7 - FortiSASE 25 Enterprise Administrator Exam Materials exam


Question 34 Discussion

An administrator must restrict endpoints from certain countries from connecting to FortiSASE. Which configuration can achieve this? (Choose one answer)

  • A. A network lockdown policy on the endpoint profiles
  • B. Source IP anchoring to restrict access from the specified countries
  • C. A geography address object as the source for a deny policy
  • D. Geofencing to restrict access from the required countries
Correct Answer: D

Brave-Dump Clients Votes

D 100%

Comments



javaughn Bryan 2025-11-21 20:58:16

Selected Answers: D


Some companies must ensure that users connect to POPs in specific countries from specific regions because of government regulations or compliance requirements. FortiSASE geofencing capabilities can enable precise control, ensuring users connect from only approved countries to designated POPs, meeting local compliance requirements.

By default, remote user connections and edge devices from all countries can connect to FortiSASE. You can restrict or allow countries to connect FortiSASE on the Geofencing page.

PAGE 63. SASE CORE ADMINISTRATOR GUIDE