Explain Reports Used to Identify User Traffic and Security Issues NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A telecom provider manages SD-WAN for multiple enterprise customers. A customer reports that their video-conferencing application is performing poorly. The provider's engineer needs to determine whether the issue is caused by a specific user's bandwidth consumption, a network-wide application issue, or a security policy blocking the traffic. Which sequence of reports should the engineer run first?

   • ARun the Top Users report, then the Application Usage report, then the Web Filtering report
   • BRun the Web Filtering report, then the Application Usage report, then the Top Users report
   • CRun the Traffic Summary report, then the VPN Tunnel report, then the Top Users report
   • DRun the Intrusion Prevention report, then the Antivirus report, then the Anomaly Detection report
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A financial services firm runs SD-WAN across 20 offices. The compliance team requires a monthly report that proves the firewall is blocking known malware downloads and preventing access to phishing sites. The security team also wants to identify which users are generating the most security alerts so they can prioritize retraining. The administrator must generate a single scheduled report that satisfies both the compliance and security-team requirements. Which approach should the administrator take?

   • ARun the Antivirus report and the Web Filtering report separately, then manually combine the outputs
   • BUse the Top Users report and filter by security events
   • CSchedule the Intrusion Prevention report only, as it covers both malware and phishing categories
   • DConfigure a custom report that includes antivirus and web filtering sections, grouped by user
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A hospital's IT team is investigating a potential HIPAA breach. They suspect that a nurse accessed patient records from an unauthorized device. The team needs to prove whether the nurse's device communicated with the hospital's EHR system, and whether any security policies (IPS, AV, or web filter) blocked or allowed that traffic. Which report combination provides the most complete evidence?

   • AWeb Filtering report only
   • BIntrusion Prevention report, Antivirus report, and Web Filtering report
   • CAnomaly Detection report and Traffic Summary report
   • DTop Users report and Application Usage report
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which report type in FortiAnalyzer is used to identify attempts to exploit vulnerabilities in network services?

   • AUser Application Usage report
   • BWeb Filtering report
   • CIntrusion Prevention report
   • DTop Users report
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which FortiManager or FortiAnalyzer report type is specifically designed to show which users are consuming the most bandwidth on the network?

   • AIntrusion Prevention report
   • BAnomaly Detection report
   • CWeb Filtering report
   • DTop Users report
   Reveal Solution Discussion Select an answer first