Explain Reports Used to Identify User Traffic and Security Issues NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 3)

Questions 11–15

1. 11application · hard

   A university's SOC is monitoring for signs of a botnet infection. They need a report that shows traffic to known malicious domains and IP addresses, as detected by the web filter and IPS. The report should include the user, the destination, and whether the traffic was blocked. Which report type provides this combined view?

   • AWeb Filtering report
   • BAnomaly Detection report
   • CCustom report combining Web Filtering and Intrusion Prevention data
   • DIntrusion Prevention report
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A university's IT security team is investigating a potential data exfiltration incident. They suspect that a compromised workstation is communicating with a known command-and-control (C2) domain. The team needs a report that shows which users accessed the C2 domain, how many times, and whether the requests were blocked or allowed by the web filter. Which report type provides this information?

   • AIntrusion Prevention report
   • BWeb Filtering report
   • CTop Users report
   • DAnomaly Detection report
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A managed service provider (MSP) oversees SD-WAN for 15 retail clients. A client complains that their internet link is saturated every afternoon. The MSP needs to determine whether the saturation is caused by a single user, a specific application, or a particular site before escalating to the client's IT team. Which combination of reports should the administrator run first?

   • AIntrusion Prevention report and Antivirus report
   • BTraffic Summary report and VPN Tunnel report
   • CTop Users report and Application Usage report
   • DWeb Filtering report and Anomaly Detection report
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary purpose of the Web Filtering report in FortiAnalyzer?

   • ATo display malware infections blocked by antivirus
   • BTo identify users consuming the most bandwidth overall
   • CTo list intrusion attempts detected by the IPS
   • DTo show which web categories users are accessing and how much traffic they generate
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which report type would you use to detect unusual traffic patterns that might indicate a compromised host or network scan?

   • ATop Users report
   • BUser Application Usage report
   • CAntivirus report
   • DAnomaly Detection report
   Reveal Solution Discussion Select an answer first