Implement Security Profiles to Perform Content Inspection NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   How can Secure Internet Access (SIA) be provided to remote users who do not have an agent installed?

   • ABy requiring the user to connect to a VPN every time
   • BBy only inspecting traffic when the user is on the corporate network
   • CBy using a hardware token for authentication
   • DBy using browser-based or gateway-based methods
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A hospital allows visiting specialists to access a web-based patient portal from their personal tablets and laptops. These devices are not managed by the hospital and cannot have any software installed. The hospital must ensure that web traffic to the portal is filtered for malware and that the users' identities are verified, but they do not need to inspect encrypted traffic content. What is the most appropriate way to provide SIA to these users?

   • AAsk the specialists to connect to the hospital's IPsec VPN using the built-in client on their devices.
   • BProvide access through a FortiSASE agentless web portal that authenticates users and forwards traffic to the SIA cloud for web filtering.
   • CCreate a guest Wi-Fi network with a captive portal that only requires a password and then routes traffic directly to the internet.
   • DConfigure the hospital's FortiGate to perform SSL deep inspection on all traffic from the guest Wi-Fi network.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is a key advantage of using an agent for SIA on remote user devices?

   • AIt only works when the user is connected to the corporate LAN
   • BIt eliminates the need for any security inspection on the device
   • CIt allows traffic steering and policy enforcement even when the user is off-network
   • DIt requires the user to manually configure the VPN connection each time
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company wants to block access to social media sites during working hours but allow access during lunch breaks. They also want to ensure that users cannot bypass the filter by using a web proxy. Which two features should be combined in a firewall policy to achieve this?

   • AApplication control with a schedule and an IPS sensor.
   • BWeb filter with geofencing and antivirus profile.
   • CWeb filter with a schedule and application control to block proxy and tunneling applications.
   • DDLP profile with a schedule and web filter.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the primary function of web filtering?

   • ATo manage IP address assignments for web servers
   • BTo control access to web content based on categories, reputation, and policy
   • CTo detect and block malware in email attachments
   • DTo encrypt web traffic between the client and server
   Reveal Solution Discussion Select an answer first