Implement Security Profiles to Perform Content Inspection NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A global company uses FortiSASE to provide SIA to its remote workforce. The security policy requires that access to a sensitive internal application be restricted to users physically located in the United States. However, some US-based employees travel frequently and connect from other countries. The company wants to enforce this policy without disrupting the connectivity of traveling employees to other, non-sensitive resources. What is the most effective way to implement this requirement?

   • ACreate a separate SIA policy for the sensitive application that includes a geofencing rule to allow access only from US IP addresses, and ensure this policy is evaluated before the general SIA policy.
   • BApply a geofencing rule to the general SIA policy that blocks all traffic from non-US IP addresses.
   • CUse IPAM to assign US-based IP addresses to all traveling employees before they leave the country.
   • DConfigure the sensitive application to require a second factor of authentication, such as a hardware token, for all users.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the primary role of FortiCASB in an organization?

   • ATo provide DNS filtering for internet traffic
   • BTo replace the organization's firewall for all network traffic
   • CTo provide visibility, compliance, and data security for SaaS applications
   • DTo manage on-premises server infrastructure
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A security administrator is configuring a firewall policy for a public-facing web server. They want to protect the server from known web application attacks like SQL injection and cross-site scripting (XSS). They also want to ensure that the traffic is inspected for these threats even if it is encrypted with HTTPS. What should the administrator configure?

   • AAttach a web filter profile with a SQL injection category.
   • BEnable SSL deep inspection and attach an IPS sensor with signatures for SQL injection and XSS.
   • CAttach an IPS sensor to the policy without enabling SSL deep inspection.
   • DEnable certificate inspection and attach an antivirus profile.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which of the following is a detection method used by IPS sensors?

   • ASignature-based detection
   • BURL categorization
   • CData loss prevention patterns
   • DGeolocation-based detection
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is the primary function of antivirus scanning in network security?

   • ATo filter web content based on categories
   • BTo manage user access to the network
   • CTo encrypt sensitive data in transit
   • DTo detect and block malware in network traffic
   Reveal Solution Discussion Select an answer first