Implement Security Profiles to Perform Content Inspection NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the purpose of a security profile group?

   • ATo store logs from multiple security profiles
   • BTo bundle multiple security profiles for simplified policy assignment
   • CTo combine multiple firewall interfaces into a single logical interface
   • DTo group users into different access levels
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   How is Secure Internet Access (SIA) typically delivered to remote users who have an agent installed on their device?

   • AThe remote user's traffic is inspected only when they connect to the corporate VPN
   • BThe agent establishes a secure tunnel and redirects traffic to the security service
   • CThe user must manually configure a proxy on their browser
   • DThe agent only monitors traffic but does not enforce security policies
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   In a geofencing policy, what is the typical basis for determining whether a user is allowed to access a resource?

   • AThe user's device type and operating system
   • BThe user's authentication method and credentials
   • CThe user's IP address or GPS coordinates
   • DThe user's role and group membership in the directory
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A network administrator notices that users are streaming video and using peer-to-peer file sharing, consuming significant bandwidth. The administrator wants to limit the bandwidth used by these applications but still allow them to function. Which security profile feature should be used?

   • AApplication control with traffic shaping.
   • BAntivirus profile with traffic shaping.
   • CWeb filter with a bandwidth limit.
   • DIPS sensor with a bandwidth limit.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company wants to enforce web filtering based on URL categories. They are concerned about the performance impact of decrypting all HTTPS traffic. They decide to use certificate inspection instead of full SSL deep inspection. What is a key limitation of this approach that the administrator must be aware of?

   • ACertificate inspection can validate the server certificate but cannot see the requested URL path or the content of the HTTPS session.
   • BCertificate inspection requires installing a Fortinet CA certificate on all client devices.
   • CCertificate inspection will block all traffic to sites with valid certificates.
   • DCertificate inspection decrypts the traffic but does not re-encrypt it, causing errors on the client.
   Reveal Solution Discussion Select an answer first