Analyze SD-WAN Logs to Monitor Rules and Session Behavior NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which log type is most relevant for analyzing SD-WAN session behavior?

   • ASecurity logs
   • BSystem logs
   • CTraffic logs
   • DEvent logs
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A network engineer needs to quickly identify which SD-WAN rules are generating the most traffic and whether any rules are being bypassed. Which FortiView feature provides real-time visibility into rule usage and session behavior?

   • AThe FortiView Applications widget, which shows application usage but not rule matching.
   • BThe FortiView SD-WAN Rules widget, which shows rule hit counts and session counts in real time.
   • CThe FortiView Sessions widget, which lists all active sessions but not rule usage.
   • DThe FortiGate CLI command 'get system sdwan', which shows configuration but not real-time usage.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   An administrator is investigating an SD-WAN session that was dropped. Which log type would contain the most relevant information about why the session was dropped?

   • AEvent logs, which record system events but not session-specific details.
   • BSecurity logs, which focus on security threats, not SD-WAN session drops.
   • CTraffic logs, which record session start and end, including the action taken.
   • DSystem logs, which show system health but not session drops.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company must share SD-WAN traffic logs with a third-party auditor. The logs contain source and destination IP addresses, which are considered personal data. The auditor needs to analyze traffic patterns but does not need to know the actual IPs. Which log anonymization technique should be applied?

   • AReplace IPs with a random value for each log entry.
   • BRemove the IP address fields entirely from the logs.
   • CHash the IP addresses using a one-way hash function.
   • DEncrypt the logs with a shared key and provide the key to the auditor.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which technique is commonly used to anonymize IP addresses in logs?

   • AReplacing the IP address with a hash value
   • BEncrypting the log file
   • CChanging the IP address to a random public IP
   • DDeleting the entire log entry
   Reveal Solution Discussion Select an answer first