Implement Security Profiles to Perform Content Inspection NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A company has 500 remote sales employees who use company-managed Windows laptops with the FortiClient agent installed. The security team wants to enforce web filtering and application control for these users regardless of their physical location, while minimizing the administrative overhead of managing separate policies for each region. What should the administrator configure to meet this requirement?

   • AConfigure the FortiClient agent to use a static IPsec tunnel to the nearest FortiGate, and apply security profiles only on that gateway.
   • BDeploy a proxy auto-config (PAC) file to all laptops that redirects HTTP/HTTPS traffic to the on-premises FortiGate for inspection.
   • CCreate a separate IPsec VPN tunnel for each region and apply different firewall policies with security profiles on the on-premises FortiGate.
   • DConfigure a single SIA policy in FortiSASE that applies to all agent-based remote users, with web filter and application control security profiles attached.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   What is the role of an inline CASB in Secure SaaS Access (SSA)?

   • ATo manage user identities in SaaS applications
   • BTo enforce security policies on SaaS traffic in real time
   • CTo provide only logging and reporting of SaaS usage
   • DTo replace the need for any firewall in the network
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Which of the following is a key benefit of using IPAM in an enterprise network?

   • AIt automatically blocks malicious IP addresses from accessing the network
   • BIt accelerates the encryption of all network traffic
   • CIt reduces IP address conflicts and improves address utilization
   • DIt provides real-time threat intelligence for IP addresses
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   What is a common limitation of agentless SIA compared to agent-based SIA?

   • AIt may not cover all applications and traffic types
   • BIt is more complex to deploy than agent-based SIA
   • CIt requires the user to be on a specific network
   • DIt cannot provide any security inspection
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   How does application control typically identify applications?

   • ABy inspecting packet content and using application signatures
   • BBy analyzing the MAC address of the server
   • CBy only looking at the destination IP address
   • DBy checking the user's browser history
   Reveal Solution Discussion Select an answer first