Describe FortiSASE Integration with SD-WAN NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company is planning to migrate from a traditional data-center-centric network to a SASE architecture. The company has 40 branch offices with FortiGate SD-WAN. The goal is to reduce the load on the data center by offloading internet traffic. Which FortiSASE integration use case directly supports this goal?

   • AData-center migration, where the data center is moved to a cloud provider.
   • BCloud on-ramp, where branch internet traffic is steered to FortiSASE for security inspection instead of backhauling to the data center.
   • CBranch consolidation, where multiple branch offices are merged into a single location.
   • DSecure remote access, where remote users connect to the corporate network via FortiSASE.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   An enterprise wants to use FortiSASE as a cloud on-ramp for its SD-WAN branches to access SaaS applications. What is the primary benefit of this integration?

   • AIt eliminates the need for any internet connection at the branch.
   • BIt guarantees lower latency than any direct internet path.
   • CIt replaces the SD-WAN edge device at each branch.
   • DIt provides a secure, optimized path from branches to cloud applications.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A manufacturing company has 30 branch sites connected via SD-WAN. The company is migrating its ERP system to a SaaS application hosted on the internet. The current SD-WAN configuration sends all traffic to the data center for inspection, causing high latency for SaaS traffic. The company wants to reduce latency while maintaining security inspection for all internet traffic. What should the network team configure?

   • AUse FortiSASE only for remote users and continue backhauling branch SaaS traffic to the data center.
   • BRoute SaaS traffic directly to the internet without any security inspection to minimize latency.
   • CEnable direct internet access (DIA) at each branch and steer SaaS traffic to FortiSASE for cloud-based security inspection.
   • DKeep backhauling all traffic to the data center but add a dedicated MPLS circuit for SaaS traffic.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A multinational corporation has 300 branch offices across three continents. The company uses FortiGate SD-WAN and wants to deploy FortiSASE for internet security. The company has a limited IT budget and wants to minimize the number of FortiSASE POPs they connect to, but also wants to ensure low latency for users. Which deployment strategy should the architect recommend?

   • AConnect each branch to the geographically nearest FortiSASE POP to minimize latency, even if this means using multiple POPs.
   • BConnect all branches to a single FortiSASE POP located in the region with the most branches.
   • CUse FortiSASE only for branches in the same country as the POP and keep other branches on local security.
   • DDeploy a FortiSASE POP in each branch office.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company with 15 branch offices is deploying FortiSASE. The branches have FortiGate SD-WAN appliances. The company wants to ensure that traffic to a specific SaaS application (e.g., Office 365) is optimized for performance while still being inspected by FortiSASE. What should the administrator configure?

   • ACreate an SD-WAN policy that steers Office 365 traffic to FortiSASE via the nearest POP, with a direct internet breakout as a fallback.
   • BSend Office 365 traffic directly to the internet without any security inspection.
   • CExclude Office 365 traffic from FortiSASE inspection to ensure optimal performance.
   • DUse a dedicated MPLS circuit for Office 365 traffic and keep FortiSASE for other traffic.
   Reveal Solution Discussion Select an answer first