Analyze SD-WAN Logs to Monitor Rules and Session Behavior NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 6)

Questions 26–28

1. 26foundation · easy

   Which protocol is commonly used for forwarding logs from a FortiGate to an external syslog server?

   • ASyslog (UDP/514)
   • BHTTPS (TCP/443)
   • CSNMP (UDP/161)
   • DFTP (TCP/21)
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A network administrator is troubleshooting a report that a specific SD-WAN rule is not being used for traffic that should match it. In FortiView, which dashboard view would most directly show whether traffic is being matched to that rule and the resulting session behavior?

   • AThe FortiView Applications widget, which focuses on application usage rather than rule matching.
   • BThe Traffic Log view, which shows raw log entries but requires manual correlation to determine rule usage.
   • CThe Sessions widget, which shows all active sessions but does not indicate which SD-WAN rule matched them.
   • DThe SD-WAN Rules widget in the FortiView dashboard, which lists rules and their hit counts and session counts.
   Reveal Solution Discussion Select an answer first
3. 28application · medium

   A FortiGate is configured to store logs locally. The administrator needs to retrieve logs from a specific time range for an SD-WAN session that occurred two days ago. Which method should be used to retrieve these logs?

   • AReboot the FortiGate to refresh the log buffer.
   • BCheck the syslog server, as logs are automatically forwarded there.
   • CUse the FortiGate's log search feature in the GUI, filtering by date and time.
   • DUse the CLI command 'get log traffic' to display all traffic logs.
   Reveal Solution Discussion Select an answer first