Fortinet NSE 7 - FortiSASE 25 Enterprise Administrator

Refer to the exhibit. Based on the configuration shown, in which two ways will FortiSASE process sessions that require FortiSandbox inspection? (Choose two.)

What can be configured on FortiSASE as an additional layer of security for FortiClient registration?

Which two settings are automatically pushed from FortiSASE to FortiClient in a new FortiSASE deployment with default settings? (Choose two.)

An administrator must restrict endpoints from certain countries from connecting to FortiSASE. Which configuration can achieve this?

You have configured FortiSASE Secure Private Access (SPA) deployment. Which statement is true about traffic flows? (Choose two.)