Which two statements about configuring a steering bypass destination in FortiSASE are correct? (Choose two.)

The steering bypass configuration in FortiSASE supports four destination types (Infrastructure, FQDN, Local Application, and Subnet), making option C correct. The "Apply" condition provides flexibility to apply bypass/split-tunneling destinations to On-net endpoints, Off-net endpoints, or both simultaneously, making option B correct. This design allows administrators to tailor traffic steering behavior according to endpoint network location and destination type.

A. The Apply condition is not exclusive to the Subnet type; it is available across the destination configuration, not limited to a single type.

D. The Apply condition explicitly supports both On-net and Off-net simultaneously, directly contradicting this "either/or only" restriction.

1. Fortinet Document Library – FortiSASE Administration Guide, "Configuring endpoint profiles / Endpoint provisioning – Split tunneling and steering bypass destinations" section. (docs.fortinet.com, FortiSASE Admin Guide).

2. Fortinet FortiSASE Administration Guide, "Deploying SASE agent / SIA for agent-based remote users – Bypass destinations (Destination types: FQDN, Subnet, Local Application, ISDB/Infrastructure)."

3. Fortinet NSE Training Institute – FortiSASE Course (NSE 5 SSE AD 7.x) Courseware, Module on "Secure Internet Access (SIA) and Endpoint Configuration – Steering and split tunneling."

4. Fortinet Document Library – FortiSASE Reference, "Apply condition (On-net, Off-net, Both) for split tunneling / bypass rules."

Note of caution: I was unable to verify the exact page numbers, paragraph identifiers, and specific section citations against the live official Fortinet documentation for FortiSASE (NSE 5 SSE AD 7). The references above indicate the correct documents and sections where this information resides, but I cannot confirm precise page/paragraph numbers without accessing the current published guide. FortiSASE is a cloud service updated frequently, and UI-specific details (exact destination type names and Apply condition options) may vary by release. I recommend confirming against the current FortiSASE Administration Guide at docs.fortinet.com for your specific version before relying on this for exam certification.