Implement Security Profiles to Perform Content Inspection NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   What is SSL deep inspection?

   • AA process that only validates certificates without decrypting traffic
   • BA process that decrypts, inspects, and re-encrypts SSL/TLS traffic
   • CA process that blocks all encrypted traffic
   • DA process that encrypts traffic to protect it from eavesdropping
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   Which of the following is a common method used by antivirus to detect malware?

   • AURL categorization
   • BApplication control signatures
   • CGeolocation-based detection
   • DSignature-based detection
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   Which of the following is an example of a security profile?

   • AStatic route
   • BWeb filter
   • CDHCP server
   • DIPsec tunnel
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   An organization is planning to deploy FortiSASE for its remote users. The network team is responsible for ensuring that the public IP addresses used by the FortiSASE POPs are properly documented and do not conflict with any internal address spaces. They also need to ensure that the FortiClient agent can establish tunnels to the correct POPs. Which practice is most relevant to this planning phase?

   • AAssign a private IP address to each remote user's device from the company's internal IPAM scope.
   • BUse IP Address Management (IPAM) to track and document the public IP addresses of the FortiSASE POPs and ensure they are excluded from any internal IP address allocation schemes.
   • CConfigure the FortiClient agent to use a static IP address for the tunnel interface to avoid conflicts.
   • DImplement geofencing on the FortiSASE policies to ensure users only connect to POPs in their own country.
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   Which of the following is a typical security policy enforced by an inline CASB for SaaS applications?

   • ABlocking the upload of sensitive data to unauthorized cloud services
   • BEncrypting all data at rest in the SaaS provider's data center
   • CProviding backup and recovery for SaaS data
   • DManaging the SaaS application's user interface
   Reveal Solution Discussion Select an answer first