FCSS – FortiSASE Administrator 25 — Question 2

Which two of the following can release the network lockdown on the endpoint applied by FortiSASE? (Choose two.)

Answer options

• A. When the endpoint connects to the FortiSASE tunnel
• B. When the endpoint is determined as on-net
• C. When the endpoint is rebooted
• D. When the endpoint is determined as compliant using ZTNA tags

Correct answer: A, B

Explanation

The correct answers, A and B, indicate conditions under which the endpoint can regain network access. Connecting to the FortiSASE tunnel (A) establishes a secure connection, while being recognized as on-net (B) signifies that the endpoint is within a trusted network. Options C and D do not directly trigger the release of the lockdown; a reboot does not guarantee compliance or connection, and compliance is determined by ZTNA tags but not solely responsible for lifting the lockdown.