StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · FortiSASE and onboarding

Practice question 100 of 440 · medium

A small supported site should steer traffic through its FortiGate gateway into FortiSASE without installing FortiClient on every site device. Which on-ramp fits?

Choose the single best answer.

  1. A.Supported FortiGate secure-edge/LAN-extension connectivity
  2. B.A PAC file assumed to redirect every site protocol
  3. C.A management-only FortiClient registration with no traffic on-ramp
  4. D.A ZTNA application rule alone with no gateway-to-service tunnel
Show the answer and explanation

✓ Correct answer

  • Supported FortiGate secure-edge/LAN-extension connectivity

The supported secure-edge/LAN-extension on-ramp connects the site gateway using VXLAN over IPsec. A PAC is proxy-client steering; management registration or an application rule alone does not establish the site tunnel.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.