FCSS – FortiSASE Administrator 24 — Question 1

Your organization is currently using FortiSASE for its cybersecurity. They have recently hired a contractor who will work from the HQ office and who needs temporary internet access in order to set up a web-based point of sale (POS) system.
What is the recommended way to provide internet access to the contractor?

Answer options

• A. Configure a VPN policy on FortiSASE to provide access to the internet.
• B. Use FortiClient on the endpoint to manage internet access.
• C. Use a proxy auto-configuration (PAC) file and provide secure web gateway (SWG) service as an explicit web proxy.
• D. Use zero trust network access (ZTNA) and tag the client as an unmanaged endpoint.

Correct answer: C

Explanation

The correct answer is C because using a PAC file alongside SWG ensures that the contractor's internet access is securely managed while allowing only the necessary web traffic. Option A would not sufficiently manage the contractor's access requirements, B lacks the specific configuration needed for web access, and D may not be appropriate for temporary internet access as it focuses on unmanaged device security rather than providing access.