NSE7 Advanced VPN and Zero Trust Practice Question
An administrator wants to implement ZTNA inline CASB to control access to a SaaS application (e.g., Office 365). Which three components are required for this setup? (Choose THREE)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
FortiClient EMS for device posture and tag assignment
ZTNA inline CASB requires FortiGate as an inline proxy, FortiClient EMS for device posture and identity, and a ZTNA rule that proxies traffic to the SaaS application. Additionally, SSL deep inspection is required to decrypt and inspect traffic.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
FortiClient EMS for device posture and tag assignment
Why this is correct
EMS provides device compliance and tags.
- ✓
FortiGate with ZTNA proxy enabled
Why this is correct
FortiGate acts as the proxy for SaaS traffic.
- ✗
FortiNAC for network access control
Why it's wrong here
FortiNAC is not required for ZTNA CASB.
- ✗
A VPN tunnel between FortiGate and the SaaS provider
Why it's wrong here
No VPN tunnel needed; traffic is proxied directly.
- ✓
A ZTNA rule configured as an access proxy for the SaaS application
Why this is correct
The ZTNA rule defines the application and access conditions.
Go deeper
Related to this question
About these practice questions
One of 940 original NSE7 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.