A company wants to apply a consistent security baseline to all remote endpoints. The baseline must include malware scanning, web filtering for high-risk categories, and application control. The admin decides to use a custom security profile group. What is the primary benefit of using a custom security profile group instead of configuring each feature separately on every endpoint?

It enables the admin to bypass the need for antivirus profiles

It automatically updates FortiGuard categories without manual intervention

It reduces the number of licenses required for endpoint protection

It allows the admin to bundle multiple security features into a single reusable object for assignment

An admin needs to deploy a security baseline to a new batch of 50 endpoints. The baseline includes antivirus, web filtering, and application control. The admin wants to ensure all 50 endpoints receive the exact same configuration. What should the admin do?

Create one custom security profile group with all three profiles and assign it to all 50 endpoints

Configure the profiles directly on each endpoint individually

Create three separate security profile groups and assign them randomly to the endpoints

Use a single antivirus profile and skip web filtering and application control

What is the primary goal of endpoint provisioning in the context of SD-WAN?

To increase the bandwidth of the SD-WAN link

To provide a backup for the FortiGate configuration

To reduce the number of FortiGate devices in the network

To ensure managed endpoints are configured with the appropriate security profiles

A marketing agency wants to allow employees to access social media for client work but wants to block malicious sites. The admin is configuring an endpoint profile. Which FortiGuard category configuration is most appropriate?

Allow 'Social Networking' but block 'Malicious Websites' and 'Phishing'

Block 'Malicious Websites' and 'Phishing' only

Block 'Social Networking' and allow all other categories

Allow all categories without any blocks

A school district wants to block access to gambling and adult content on all student-issued laptops. The admin is creating an endpoint profile with a web filter. Which FortiGuard category configuration should be used?

Block the 'Gambling' and 'Adult/Mature Content' categories

Allow all categories except 'Education'

Enable the 'Safe Search' feature only

Block the 'Information Technology' category

FortinetNSE 5 - SD-WAN Core Administrator

Domain 4Objective 2

Deploy Compliance Rules to Managed Endpoints NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 3)

Part of the Secure Internet Access (SIA) and Secure SaaS Access (SSA) domain, which accounts for 15-25% of the NSE5-SD-WAN-CORE-ADMINISTRATOR exam.

26questions here

6free pages

5concepts

15-25%of the exam

Questions 11–15

11application · medium
A company wants to apply a consistent security baseline to all remote endpoints. The baseline must include malware scanning, web filtering for high-risk categories, and application control. The admin decides to use a custom security profile group. What is the primary benefit of using a custom security profile group instead of configuring each feature separately on every endpoint?
Select an answer first
12application · medium
An admin needs to deploy a security baseline to a new batch of 50 endpoints. The baseline includes antivirus, web filtering, and application control. The admin wants to ensure all 50 endpoints receive the exact same configuration. What should the admin do?
Select an answer first
13foundation · easy
What is the primary goal of endpoint provisioning in the context of SD-WAN?
Select an answer first
14application · medium
A marketing agency wants to allow employees to access social media for client work but wants to block malicious sites. The admin is configuring an endpoint profile. Which FortiGuard category configuration is most appropriate?
Select an answer first
15application · easy
A school district wants to block access to gambling and adult content on all student-issued laptops. The admin is creating an endpoint profile with a web filter. Which FortiGuard category configuration should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE5-SD-WAN-CORE-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE5-SD-WAN-CORE-ADMINISTRATOR” is a trademark of its owner, used for identification only.