View all questions & answers for the NSE 4 - FortiOS 7.6 Administrator Exam Materials exam

NSE 4 - FortiOS 7.6 Administrator Exam Materials - Question #82 Discussion

Comment Image Comment Image Comment Image

An administrator wants to address shadow IT visibility challenges and prevent users from sending sensitive files outside the organization without proper approval. Which FortiSASE method should the administrator implement to achieve these goals? (Choose one answer)

  • A. Secure SD-WAN access (SSD-WAN)
  • B. Secure private access (SPA)
  • C. Secure SaaS access (SSA)
  • D. Secure internet access (SIA)
Correct Answer: C

Brave-Dump Community Votes

Answer: C (6 votes) 75%
Answer: D (2 votes) 25%

Community Explanations & Comments (8)

Nick 1 year ago
Selected: C
I believe C is correct. SSA deals with DLP. The question asks how to prevent users from sending sensitive files outside the organisation without proper approval. I believe this refers to DLP and therefore SSA is the should be the correct answer:

https://docs.fortinet.com/document/fortisase/latest/concept-guide/918705/ssa
Jay gabasa 1 year ago
Selected: D
Reasoning (based on the FortiGate 7.6 Study Guide, SASE section):

SIA provides inline CASB, DLP, malware prevention, and shadow IT visibility for all internet and SaaS traffic.

SSA handles API-based controls for sanctioned SaaS apps only (not full traffic inspection).

The question mentions shadow IT and preventing sensitive file uploads — that’s inline DLP, which belongs to SIA.
William Martinez 1 year ago
Selected: C
https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/d0ee386f-5790-11f0-a9d0-d2b0d2e22f7d/FortiSASE-Concept_Guide.pdf

page 11-12
Vic Geek 10 months ago
Selected: C
7.6 Study Guide Page 542
"FortiSASE provides secure access to remote users for the following use cases:

• SIA enables secure web browsing for remote users to protect from known and unknown threats

• SPA enables explicit application access under a zero-trust access or with SD-WAN integration to ensure secure application access

• SSA addresses shadow IT visibility challenges and safeguards data loss prevention"
Anonymous User 8 months ago
Selected: C
C
Ibrahim Bakhit 3 months ago
Selected: D
SIA sits between your internal users and the public internet, allowing you to enforce security policies, including Data Loss Prevention, to inspect and block the transmission of sensitive data to unauthorized destinations like personal email or cloud storage.
Secure Service Access, on the other hand, is focused on providing secure access to internal applications, which isn't the primary path for data leaving the company
Ahmed El Hasseen El Tom El Shaikh Berair 3 months ago
Selected: C
82
[email protected] 3 weeks ago
Selected: C
SSA addresses shadow IT visibility challenges and safeguards data loss prevention (DLP) there preventing sending sensitive files outside the organization without proper approval.