The correct answer is A. FortiSASE provides both API-based CASB and inline CASB. Fortinet describes FortiSASE Secure SaaS Access as using a dual-mode CASB architecture that combines inline inspection with out-of-band, API-based inspection. This provides visibility and control over SaaS usage while protecting both data in motion and data at rest.
Inline CASB operates directly in the traffic path between the endpoint and SaaS application. FortiSASE uses capabilities such as application control, web filtering, SSL deep inspection, and DLP to identify applications, enforce SaaS access controls, inspect traffic, and protect data in motion. The study guide specifically describes the inline component as recognizing SaaS application traffic and using protocol decoders and HTTP inspection to enforce controls.
The API-based or out-of-band CASB connects directly to supported cloud applications through APIs. Its principal role is inspecting and assessing data at rest that has already been stored in the SaaS service. The FortiSASE Enterprise material likewise confirms that FortiCASB provides cloud/API-based capabilities while FortiSASE simultaneously provides inline CASB through web filter and application control.
Therefore, B and C incorrectly limit FortiSASE to one CASB mode, while D incorrectly makes Security Fabric integration a prerequisite.
Study Guide Reference: SIA and SSA > Secure SaaS Access > Inline CASB and Out-of-Band CASB, pages 105–108.
