Use Available User Onboarding Methods NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary role of the agentless proxy client in SWG mode?

   • ATo provide a full VPN tunnel for all application traffic.
   • BTo store user credentials locally and automatically log them into websites.
   • CTo install and manage security certificates on the user's device.
   • DTo redirect the user's web traffic to the FortiGate for authentication and policy enforcement.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In LDAP remote authentication, what is the 'bind' operation used for?

   • ATo authenticate the FortiGate to the LDAP server so it can search for users.
   • BTo synchronize the FortiGate's clock with the LDAP server.
   • CTo bind the user's session to a specific IP address.
   • DTo establish a secure VPN tunnel between the FortiGate and the LDAP server.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following is typically NOT a component of a VPN policy configuration?

   • AThe source and destination addresses for allowed traffic.
   • BThe user groups that are allowed to use the VPN.
   • CThe DNS server IP address for the VPN clients.
   • DThe authentication method (e.g., certificate, pre-shared key, or user credentials).
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company has a hybrid work model. Employees in the office are on the corporate network, while remote employees connect via VPN. The administrator wants to enforce the same web filtering policy for both groups based on user identity. They have FortiClient deployed on all managed laptops. However, some remote employees use personal devices that cannot have FortiClient installed. Which approach ensures consistent policy enforcement for both managed and unmanaged remote devices?

   • AUse only agent-based mode for all users and require VPN for remote access.
   • BUse agent-based mode for managed devices and SWG mode with agentless proxy for unmanaged devices.
   • CUse only SWG mode for all users, including those in the office.
   • DForce all remote users to install FortiClient on their personal devices.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   In FortiClient, what is the purpose of configuring a 'Remote Access' VPN profile?

   • ATo define the connection parameters (e.g., gateway IP, authentication method) for establishing a VPN tunnel to the FortiGate.
   • BTo set up the user's email client for secure communication.
   • CTo manage the endpoint's antivirus definitions.
   • DTo configure the local firewall rules on the endpoint.
   Reveal Solution Discussion Select an answer first