Configure SASE Administration Settings NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A global company is deploying FortiSASE and must comply with data residency regulations in the EU and the US. They have users in both regions. The administrator needs to ensure that EU user data is processed only in the EU and US user data only in the US, while also minimizing cost. What is the most effective way to achieve this?

   • AUse a single POP in a neutral location and rely on data encryption.
   • BUse a single tenant with POPs in both regions and configure user groups to connect to the appropriate POP.
   • CUse a VPN to route all traffic to the company's headquarters.
   • DProvision separate FortiSASE tenants for EU and US users, each with POPs in the respective region.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A financial services company is deploying FortiSASE and must comply with regulations that require customer data to be stored and processed within the country. The company has users in multiple countries. What should the administrator configure to meet this requirement?

   • AConfigure all users to connect to a POP in the company's headquarters country.
   • BUse a single POP in a neighboring country and enable data encryption.
   • CUse a VPN to tunnel all traffic to the company's on-premises data center.
   • DSelect FortiSASE POPs in each required country and assign users to the appropriate POP based on their location.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A small business with 50 remote employees wants to adopt FortiSASE to provide secure internet access and protect against web-based threats. They have a limited budget and do not require advanced features like sandboxing or data loss prevention. Which FortiSASE license type should the administrator select?

   • AFortiSASE Zero Trust
   • BFortiSASE Enterprise
   • CFortiSASE Advanced
   • DFortiSASE Standard
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   How does FortiSASE handle data residency for customers in different regions?

   • AIt requires customers to provide their own storage infrastructure.
   • BIt automatically replicates data to all regions for redundancy.
   • CIt stores all customer data in a single global data center.
   • DIt allows customers to select a specific region for their data storage.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company has employees who work from home and use personal devices to access corporate resources. The administrator is concerned about the security of these devices and wants to ensure that corporate data is protected even if a device is compromised. Which approach should be taken?

   • AUse split tunneling to allow personal traffic to go directly to the internet.
   • BDisable access for all personal devices.
   • CProvide full VPN access to the corporate network for all users.
   • DImplement ZTNA to provide access only to specific applications and enforce device compliance checks.
   Reveal Solution Discussion Select an answer first