Use Available User Onboarding Methods NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   After installing FortiClient, what is a typical next step to enable it for user onboarding?

   • AReboot the device to apply the agent's default settings.
   • BManually create a local user account on the endpoint.
   • CDisable the Windows Firewall to ensure uninterrupted communication.
   • DRegister the agent with the FortiGate or FortiClient EMS.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   In SWG mode, how does the agentless proxy client typically get configured on a user's device?

   • AIt is embedded in the firmware of the user's network adapter.
   • BIt is manually installed as a standalone application by the user.
   • CIt is automatically installed via a Windows Update.
   • DIt is delivered as a PAC file or via browser proxy settings.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A user is configuring FortiClient for VPN-based user onboarding. The FortiClient is already installed and managed by EMS. What must be configured in FortiClient to establish a VPN tunnel to the FortiGate?

   • AThe SAML identity provider's URL and the certificate.
   • BThe EMS server's IP address and the FortiClient telemetry settings.
   • CThe FortiGate's IP address, the VPN tunnel name, and the user's credentials.
   • DThe LDAP server's IP address and the user's distinguished name.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A company uses a RADIUS server that requires a specific NAS-IP-Address attribute to identify the FortiGate. The administrator is configuring the RADIUS server object on the FortiGate for VPN authentication. What must be configured to ensure the correct NAS-IP-Address is sent?

   • AConfigure the RADIUS server to accept the FortiGate's hostname as the NAS identifier.
   • BConfigure the NAS-IP-Address attribute manually in the RADIUS server object.
   • CConfigure the FortiGate's interface IP address in the RADIUS server object.
   • DConfigure the source IP address in the RADIUS server object.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which authentication method can be used in a FortiClient VPN profile for user onboarding?

   • AUsername and password (with optional two-factor authentication).
   • BDNS-based authentication.
   • CSSH key exchange.
   • DMAC address filtering.
   Reveal Solution Discussion Select an answer first