Analyze SD-WAN Logs to Monitor Rules and Session Behavior NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   In a FortiGate traffic log, which field indicates the SD-WAN rule that was applied to the session?

   • Asrcip
   • Bpolicyid
   • Cdstport
   • Daction
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   In the FortiGate log workflow, what is the correct sequence of steps from log generation to retrieval?

   • ALog forwarding → generation → local storage
   • BLog generation → local storage → retrieval via GUI or CLI
   • CLog storage → generation → retrieval
   • DLog retrieval → generation → storage
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Where are logs stored by default on a FortiGate device?

   • AOn a USB drive attached to the FortiGate
   • BOn a remote syslog server
   • CIn FortiCloud
   • DIn the local disk or memory
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   In FortiView, which dashboard widget would you use to quickly assess the performance of SD-WAN links over time?

   • ASD-WAN Performance widget
   • BSession History widget
   • CApplication Monitor widget
   • DTop Sources widget
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   An administrator is analyzing SD-WAN traffic logs to determine why a particular session used a specific WAN interface. Which log field would provide the most direct evidence of the SD-WAN rule that was applied?

   • AThe 'policyid' field, which identifies the firewall policy, not the SD-WAN rule.
   • BThe 'sdwan-rule' field in the traffic log, which records the name of the matched rule.
   • CThe 'action' field, which indicates whether the session was allowed or denied.
   • DThe 'dstip' field, which shows the destination IP address.
   Reveal Solution Discussion Select an answer first