View all questions & answers for the NSE 7 - FortiSASE 25 Enterprise Administrator Exam Materials exam

NSE 7 - FortiSASE 25 Enterprise Administrator Exam Materials - Question #19 Discussion

Comment Image Comment Image Comment Image

Which two statements about FortiSASE Geofencing with regional compliance are true? (Choose two answers)

  • A. You can configure regional compliance on the security POP or the on-premises device, not both.
  • B. If no regional compliance rule is configured, the connection is made to the closest security POP.
  • C. A regional compliance rule can connect only to an on-premises device or only to a security POP.
  • D. The connection order for a regional compliance rule is always the security POP first, followed by the on-premises device.
Correct Answer: B,C

Brave-Dump Community Votes

Answer: B, C (2 votes) 100%

Community Explanations & Comments (2)

Brave-Dumps.com Admin 11 months ago
Selected: B, C
It needs additional check.
javaughn Bryan 11 months ago
Selected: B, C
B & C are correct.

B. If FortiSASE does not select a regional compliance rule, the remote user tries to connect to their closest FortiSASE security PoP.

FORTISASE offers only two options to connect—one at a time... not both:

C. On-premise device (gateway). FortiSASE does not manage this device’s configuration. Only FortiSASE instances enabled with SSL remote user support can use this connection type. Using this connection type for FortiSASE instances enabled with IPsec remote user support is not supported.

Security PoP. A security PoP is FortiSASE's managed security PoP in a specific region. Successful connection to this connection type establishes secure internet access (SIA).

ADMINISTRATION GUIDE: https://docs.fortinet.com/document/fortisase/latest/feature-administration-guide/869018/geofencing
Under #4