Analyze SD-WAN Logs to Monitor Rules and Session Behavior NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   An administrator wants to monitor SD-WAN session performance in real time, including latency and jitter for each session. Which FortiView dashboard widget would provide this information?

   • AThe Sessions widget, which shows session counts but not performance metrics.
   • BThe SD-WAN Performance widget, which displays real-time latency, jitter, and packet loss for active sessions.
   • CThe Traffic Log view, which shows historical logs but not real-time performance.
   • DThe Applications widget, which shows application usage but not session performance.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A healthcare organization must share SD-WAN logs with a research partner. The logs contain patient IP addresses and URLs. The research partner needs to analyze traffic patterns but must not be able to identify individual patients. Which anonymization approach should be used?

   • ARemove all URL fields and keep IPs as-is.
   • BEncrypt the logs with a key shared with the research partner.
   • CHash IP addresses and URLs using a consistent hash function.
   • DRandomize IP addresses for each log entry.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An administrator needs to monitor SD-WAN session behavior in real time, including the source and destination of each session and the interface used. Which FortiView dashboard widget would provide this information?

   • AThe Traffic Log view, which shows historical logs but not real-time sessions.
   • BThe Sessions widget, which lists active sessions with source, destination, and interface details.
   • CThe Applications widget, which shows application usage but not session details.
   • DThe SD-WAN Rules widget, which shows rule usage but not session details.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   An organization requires that all SD-WAN traffic logs be forwarded to a central SIEM for compliance. The SIEM team requests logs in a specific format and with a specific timestamp. Which FortiGate log forwarding configuration option should the administrator adjust to meet this requirement?

   • AConfigure the syslog server IP and port, but leave the format as default.
   • BSet the log format to Common Event Format (CEF) and enable log timestamp in UTC.
   • CEnable log anonymization to remove sensitive fields before forwarding.
   • DUse the FortiGate's built-in log storage instead of forwarding.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the goal of log anonymization in SD-WAN logs?

   • ATo make logs unreadable to everyone
   • BTo protect sensitive information while retaining analytical value
   • CTo speed up log retrieval
   • DTo reduce the size of log files
   Reveal Solution Discussion Select an answer first