Implement Security Profiles to Perform Content Inspection NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary role of IP Address Management (IPAM) in a network?

   • ATo filter web traffic based on URL categories
   • BTo provide dynamic routing between autonomous systems
   • CTo encrypt IP packets between network devices
   • DTo plan, track, and manage IP address spaces
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is a key requirement for SSL deep inspection to work?

   • AThe server must send its private key to the firewall
   • BThe firewall must have a certificate that clients trust
   • CThe client must use a specific browser
   • DThe client must disable all encryption
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following is a typical basis for a web filtering decision?

   • AThe URL's category, such as social media or gambling
   • BThe server's IP address only
   • CThe user's physical location
   • DThe user's device MAC address
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A multinational company uses Google Workspace. The compliance officer needs a report on all files containing personally identifiable information (PII) stored in Google Drive, and wants to ensure that sharing of these files is restricted to users in the EU. They do not need to block traffic in real-time. Which Fortinet solution is best suited for this task?

   • AConfigure a web filter to block access to Google Drive from outside the EU.
   • BEnable application control to restrict the use of Google Drive to EU-based IP addresses.
   • CDeploy FortiCASB and configure DLP policies to scan files in Google Drive via API and enforce geofencing-based sharing restrictions.
   • DUse an inline CASB to decrypt and inspect all traffic to Google Drive in real-time.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What does certificate inspection do?

   • AIt decrypts all SSL/TLS traffic to inspect the content
   • BIt validates certificates without decrypting the traffic
   • CIt encrypts traffic between the client and server
   • DIt blocks all websites with invalid certificates
   Reveal Solution Discussion Select an answer first