Implement Security Profiles to Perform Content Inspection NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   An organization uses Microsoft 365 and Salesforce. The security team wants to block malware downloads from these SaaS apps and prevent users from sharing sensitive customer data (e.g., credit card numbers) in emails or documents. They want to enforce this inline, in real-time, without requiring users to change their workflow. Which solution should they implement?

   • AUse application control to identify and block the specific SaaS apps, preventing users from accessing them.
   • BEnable web filtering on the firewall to block the SaaS application domains entirely.
   • CDeploy an inline CASB in the network path that decrypts and inspects traffic to the sanctioned SaaS applications, applying antivirus and DLP profiles.
   • DConfigure FortiCASB to connect to the SaaS applications via their APIs and perform a one-time audit of existing data.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the purpose of security profiles in a Fortinet security solution?

   • ATo provide high availability for the firewall
   • BTo manage user authentication and access to the firewall
   • CTo apply inspection and filtering to network traffic
   • DTo configure routing protocols on the firewall
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A university has three user groups: students, faculty, and administrative staff. They want to apply different web filtering and application control policies to each group. To simplify management, they want to avoid configuring individual security profiles on every firewall policy. What is the most efficient way to achieve this?

   • AConfigure the security profiles directly on the firewall policies, creating a separate policy for each user group.
   • BUse application control to block all non-essential applications and rely on that alone for security.
   • CCreate a single security profile group with the most restrictive settings and apply it to all firewall policies.
   • DCreate three security profile groups, one for each user group, and reference the appropriate group in the firewall policies that match each group's traffic.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the purpose of Data Loss Prevention (DLP)?

   • ATo manage user authentication
   • BTo prevent sensitive data from leaving the network
   • CTo encrypt all data at rest
   • DTo filter web content based on categories
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is a benefit of using security profile groups?

   • AIt increases the firewall's throughput by combining profiles
   • BIt simplifies management by allowing changes to be made in one place
   • CIt automatically blocks all malicious traffic without configuration
   • DIt allows different profiles to be applied to different users in the same policy
   Reveal Solution Discussion Select an answer first