FCSS – FortiSASE Administrator 23 — Question 32

Your organization is currently using FortiSASE for its cybersecurity. They have recently hired a contractor who will work from the HQ office and who needs temporary internet access in order to set up a web-based point of sale (POS) system.

What is the recommended way to provide internet access to the contractor?

Answer options

• A. Configure a VPN policy on FortiSASE to provide access to the internet.
• B. Use a proxy auto-configuration (PAC) file and provide secure web gateway (SWG) service as an explicit web proxy.
• C. Use zero trust network access (ZTNA) and tag the client as an unmanaged endpoint.
• D. Use FortiClient on the endpoint to manage internet access.

Correct answer: B

Explanation

The correct answer is B, as using a proxy auto-configuration (PAC) file with secure web gateway (SWG) service provides a secure and explicit method for the contractor to access the internet while maintaining oversight. Option A is incorrect because a VPN policy is not necessary for temporary access in this scenario. Option C does not provide the necessary access for a web-based POS system, and Option D is not suited for temporary access as it is more geared towards ongoing endpoint management.