Deploy Compliance Rules to Managed Endpoints NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   An admin is creating a custom security profile group for a department that handles highly sensitive data. The group must include antivirus protection and web filtering. The admin wants to ensure that any new security feature added to the group is automatically applied to all endpoints using it. What is the best approach?

   • AWait for the next FortiGuard update to apply the feature
   • BCreate a new security profile group and assign it to the endpoints
   • CAdd the new feature to the custom security profile group
   • DConfigure the new feature directly on each endpoint
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   An admin is configuring a security profile group for a set of endpoints that handle sensitive customer data. The admin wants to ensure that any file downloaded from the internet is scanned for malware before it can be opened. Which antivirus profile setting must be enabled?

   • ACloud-based sandboxing for all files
   • BReal-time scanning with scan-on-download enabled
   • CScheduled full-system scans every night
   • DHeuristic scanning for unknown threats only
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company has a group of finance users who must only access banking and tax-related websites during work hours. The SD-WAN admin creates an endpoint profile for these users. Which two configuration elements must be combined in this endpoint profile to enforce this requirement?

   • AAn endpoint profile with a DNS filter that blocks all categories except banking
   • BA custom security profile group containing only an intrusion prevention profile
   • CAn antivirus profile with real-time scanning and a FortiGuard category block-list
   • DA FortiGuard web filter profile with a custom category allow-list and a schedule applied to the profile
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   How do FortiGuard web filtering categories help administrators control web access?

   • ABy providing a list of all visited websites
   • BBy encrypting all web traffic
   • CBy allowing or blocking access to websites based on their category
   • DBy automatically increasing bandwidth for certain websites
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A company has a custom security profile group 'Baseline' that includes antivirus and web filtering. The admin needs to add application control to this group, but only for a subset of endpoints. The admin is considering creating a new group 'Baseline-Plus' that includes all three features. What is the main trade-off of this approach?

   • AIt increases management overhead because two groups must be maintained and kept in sync
   • BIt prevents the 'Baseline' group from being updated in the future
   • CIt requires additional licenses for the endpoints using 'Baseline-Plus'
   • DIt reduces the security posture of the endpoints using 'Baseline-Plus'
   Reveal Solution Discussion Select an answer first