Use Available User Onboarding Methods NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company is setting up user onboarding for its SD-WAN environment. They have an existing Active Directory (LDAP) server for user accounts and a separate RADIUS server for network access. The administrator wants to authenticate users for web filtering using the existing LDAP directory. What is the most straightforward configuration on the FortiGate?

   • AConfigure the FortiGate to act as a RADIUS client to the LDAP server.
   • BCreate an LDAP server object on the FortiGate and configure it as the authentication server for user onboarding.
   • CConfigure the RADIUS server as the primary authentication server and LDAP as a fallback.
   • DUse SAML SSO with the LDAP server as the identity provider.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which statement accurately describes a key characteristic of agent-based user onboarding?

   • AIt requires no software installation on the user's device.
   • BIt relies on a browser-based captive portal for user authentication.
   • CIt is only suitable for unmanaged or BYOD devices.
   • DIt provides deeper visibility and control by leveraging the FortiClient agent's telemetry and compliance checks.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   An organization is deploying FortiClient for user onboarding. They want to minimize manual configuration on each endpoint and ensure that the FortiClient agent automatically connects to the correct FortiGate for VPN and user identity reporting. Which deployment approach should the administrator use?

   • AConfigure the FortiGate to push its configuration to FortiClient via the web interface.
   • BInstall FortiClient manually on each workstation and configure the VPN and fabric settings individually.
   • CDeploy the agentless proxy client to handle VPN and identity reporting.
   • DUse FortiClient EMS to deploy the agent with a configuration profile that includes the FortiGate's address and fabric connection settings.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   How does Secure Web Gateway (SWG) mode provide user onboarding without installing software on the endpoint?

   • ABy installing a lightweight browser extension on the user's device.
   • BBy redirecting the user's web traffic through a proxy that authenticates the user and enforces policies.
   • CBy using a VPN tunnel that requires the user to enter credentials in a client application.
   • DBy requiring the user to manually enter their credentials on the FortiGate's CLI.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the main advantage of using SAML SSO for user onboarding compared to LDAP or RADIUS?

   • AIt is the only method that supports multi-factor authentication.
   • BIt does not require any configuration on the identity provider side.
   • CIt is simpler to set up than LDAP.
   • DIt provides a single sign-on experience, allowing users to authenticate once and access multiple services.
   Reveal Solution Discussion Select an answer first