Explain Reports Used to Identify User Traffic and Security Issues NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A healthcare provider is preparing for an audit that requires evidence that patient data was not exfiltrated via web traffic. The auditor asks for a report showing all blocked web requests to uncategorized or high-risk domains, along with the user who attempted the access. The administrator must also prove that the intrusion prevention system blocked any attempts to exploit known vulnerabilities. Which single report type can satisfy both audit requirements?

   • AAnomaly Detection report
   • BIntrusion Prevention report
   • CCustom report combining Web Filtering and Intrusion Prevention sections
   • DWeb Filtering report
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which report type in FortiAnalyzer provides a breakdown of the applications used by individual users on the network?

   • ATop Users report
   • BUser Application Usage report
   • CAntivirus report
   • DAnomaly Detection report
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which report type in FortiAnalyzer would you use to review blocked malware infections detected on the network?

   • AAntivirus report
   • BWeb Filtering report
   • CAnomaly Detection report
   • DTop Users report
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A law firm uses FortiAnalyzer to monitor SD-WAN traffic. The IT manager wants to know which applications are consuming the most bandwidth on the firm's internet link, so they can decide whether to upgrade the link or implement application-specific QoS policies. Which report type should the administrator run?

   • AApplication Usage report
   • BWeb Filtering report
   • CTop Users report
   • DTraffic Summary report
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A multinational corporation's SD-WAN spans 30 sites. The security director wants a weekly report that identifies the top 5 users by total bandwidth AND the top 5 security threats (by severity) detected that week. The administrator has limited time to prepare the report each Monday. Which approach is most efficient?

   • ACreate a custom report with a Top Users section and a Security Threats section, scheduled weekly
   • BUse the Anomaly Detection report only, as it covers both bandwidth and security anomalies
   • CUse the Traffic Summary report and the Web Filtering report
   • DRun the Top Users report and the Intrusion Prevention report separately each week
   Reveal Solution Discussion Select an answer first