Configure SASE Administration Settings NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   How do the components of SASE integrate to provide a unified architecture?

   • AThey are deployed as separate hardware devices at each location.
   • BThey are managed independently by different teams with no shared policies.
   • CThey are delivered as a single cloud service with integrated networking and security.
   • DThey are connected via a central data center for all traffic.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company has employees who travel frequently and connect from various public Wi-Fi networks. The administrator wants to ensure that these users have consistent security and performance regardless of their location. Which FortiSASE feature should be enabled to address this challenge?

   • AGlobal POP connectivity
   • BOn-premises VPN concentrator
   • CSplit tunneling for all traffic
   • DStatic IP addressing for all users
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An organization currently uses a traditional WAN with MPLS and on-premises firewalls. They are considering moving to a SASE model to support remote workers. What is a key difference the administrator should consider when planning this transition?

   • ASASE uses MPLS as the primary transport for all connections.
   • BSASE requires all traffic to be backhauled to the corporate data center.
   • CSASE shifts security enforcement from on-premises appliances to a cloud-delivered service.
   • DSASE provides security only for on-premises users.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An organization is migrating from a traditional hub-and-spoke WAN with on-premises security appliances to FortiSASE. The administrator needs to ensure a smooth transition without disrupting current operations. Which step should be taken first during the provisioning process?

   • ADeploy FortiSASE clients to all remote users immediately.
   • BDefine the security policies for all users before creating the tenant.
   • CCreate a FortiSASE tenant and configure the initial admin account and network settings.
   • DConfigure the on-premises security appliances to forward traffic to FortiSASE.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A large enterprise is evaluating a move from a traditional MPLS-based WAN with on-premises security to a SASE architecture. The network team is concerned about losing visibility and control over traffic. The security team wants to ensure that all traffic is inspected. The company has a mix of branch offices and remote workers. Which approach best addresses both teams' concerns?

   • ADeploy FortiSASE with cloud-delivered security and maintain SD-WAN at branch offices for local internet breakout.
   • BReplace all on-premises security with a single cloud firewall and route all traffic through it.
   • CKeep the MPLS network and add a cloud security service for remote workers only.
   • DUse a traditional VPN for remote workers and keep on-premises security for branches.
   Reveal Solution Discussion Select an answer first