Describe FortiSASE Integration with SD-WAN NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company with 40 branch offices is deploying FortiSASE. The branches have FortiGate SD-WAN appliances. The company wants to ensure that all internet traffic is inspected, but also wants to maintain a consistent user experience for cloud-based applications. What should the administrator configure?

   • AUse SD-WAN to steer cloud application traffic to the nearest FortiSASE POP, ensuring low latency and consistent performance.
   • BSend all cloud application traffic to a single FortiSASE POP to simplify management.
   • CExclude cloud application traffic from FortiSASE inspection to ensure performance.
   • DUse a dedicated MPLS circuit for cloud applications and FortiSASE for other traffic.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company with 25 branch offices is using FortiGate SD-WAN. The company wants to deploy FortiSASE to provide consistent security for all internet traffic. The company has a mix of high-bandwidth applications (e.g., video conferencing) and low-bandwidth applications (e.g., email). What should the administrator configure to ensure that high-bandwidth applications are not negatively impacted by FortiSASE inspection?

   • AExclude high-bandwidth applications from FortiSASE inspection to avoid performance issues.
   • BSend all traffic to FortiSASE without any traffic shaping, relying on the FortiSASE POP to handle the load.
   • CConfigure SD-WAN traffic shaping rules to prioritize high-bandwidth applications and allocate sufficient bandwidth for FortiSASE tunnels.
   • DUse a separate internet connection for high-bandwidth applications and FortiSASE for the rest.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   A company wants to provide secure internet access to remote users while also simplifying branch connectivity. They plan to use FortiSASE with SD-WAN. Which enterprise scenario best matches this requirement?

   • ASecure remote access
   • BData center consolidation
   • CWAN optimization
   • DOn-premises firewall replacement
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A logistics company with 80 branches uses FortiGate SD-WAN. The company wants to provide secure remote access for 1,200 mobile workers who are not at branch locations. The mobile workers need to access both internal applications and the internet securely. The company already has FortiSASE deployed for branch internet security. What should the administrator configure to extend secure access to mobile workers?

   • ADeploy the FortiSASE client on mobile devices and configure it to connect to the existing FortiSASE POP.
   • BConfigure the mobile workers to use a traditional IPsec VPN to the nearest branch FortiGate.
   • CCreate a new FortiSASE instance exclusively for mobile workers.
   • DUse SSL VPN on the corporate firewall for mobile workers and keep FortiSASE only for branches.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A financial services firm has 100 branch offices with FortiGate SD-WAN. The firm must comply with data-residency regulations requiring that all customer data be processed within the country. The firm is considering FortiSASE for internet security. The FortiSASE POP in the required country is available. However, the firm also has a requirement to maintain low latency for real-time trading applications. Which approach best balances compliance and performance?

   • ASteer all traffic, including trading, to the in-country FortiSASE POP to ensure full compliance.
   • BUse a FortiSASE POP in a neighboring country to reduce latency, and accept the data-residency risk.
   • CSteer all internet traffic to the in-country FortiSASE POP, and use SD-WAN rules to bypass FortiSASE for the trading application traffic.
   • DDisable FortiSASE for all traffic and rely on local FortiGate security profiles.
   Reveal Solution Discussion Select an answer first