Analyze SD-WAN Logs to Monitor Rules and Session Behavior NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which FortiView dashboard provides a summary of SD-WAN rule hits and the interfaces used for traffic?

   • ASystem Monitor widget
   • BSD-WAN Rules widget
   • CTop Applications widget
   • DFortiView Logs widget
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the purpose of configuring log forwarding on a FortiGate?

   • ATo automatically generate reports from the logs
   • BTo delete old logs from the local disk
   • CTo send logs to an external system for centralized storage and analysis
   • DTo increase the logging speed of the FortiGate
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A FortiGate is configured to forward logs to a syslog server over UDP. The administrator notices that some logs are missing during high traffic periods. Which change would most likely improve log delivery reliability?

   • AChange the syslog protocol to TCP.
   • BReduce the log verbosity to send fewer logs.
   • CEnable log anonymization.
   • DIncrease the log buffer size.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company wants to forward SD-WAN logs to two different collectors: one for security monitoring and one for performance analysis. The security collector requires logs in CEF format, while the performance collector requires logs in key-value format. How can the administrator configure log forwarding to meet both requirements?

   • AUse a single syslog server and change the format based on the destination.
   • BConfigure two separate syslog servers, each with its own log format setting.
   • CUse log anonymization to make the logs suitable for both collectors.
   • DForward all logs to the security collector and have it forward to the performance collector.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A FortiGate is configured to store logs locally and also forward them to a syslog server. The administrator notices that the local log disk is full, and new logs are not being written. What is the most likely impact on log forwarding?

   • ALog forwarding is unaffected, but the local log buffer is cleared.
   • BLog forwarding is delayed until the local disk is freed.
   • CLog forwarding stops because the FortiGate cannot generate new logs.
   • DLog forwarding continues to work because it is independent of local storage.
   Reveal Solution Discussion Select an answer first