Use Available User Onboarding Methods NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is the purpose of configuring an authentication server on the FortiGate for user onboarding?

   • ATo host the FortiClient installation files for distribution.
   • BTo provide a backup for the FortiGate's configuration files.
   • CTo validate user credentials and provide user identity information for policy enforcement.
   • DTo encrypt all traffic between the FortiGate and the internet.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   An administrator is creating a VPN policy for user onboarding. The policy must authenticate users via SAML SSO and then assign them to a specific IP pool. Which configuration steps are required?

   • ACreate a RADIUS server object, configure the VPN policy to use RADIUS, and assign an IP pool.
   • BCreate a SAML identity provider, configure the VPN policy to use SAML authentication, and assign an IP pool to the policy.
   • CCreate an LDAP server object, configure the VPN policy to use LDAP, and assign an IP pool.
   • DCreate a local user group, configure the VPN policy to use local authentication, and assign an IP pool.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What information is typically required when configuring an LDAP server on a FortiGate for remote authentication?

   • AThe server's serial number and the HTTP port (default 80).
   • BThe server's IP address and the LDAP port (default 389).
   • CThe server's hostname and the SMTP port (default 25).
   • DThe server's MAC address and the DNS port (default 53).
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   An administrator is configuring SWG mode for user onboarding. They want users to be transparently authenticated against the corporate LDAP directory when they access the web through the proxy. What is the role of the agentless proxy client in this setup?

   • AIt synchronizes user credentials with the LDAP server on behalf of the FortiGate.
   • BIt installs a kernel driver to capture all network traffic and forward it to the FortiGate.
   • CIt establishes a VPN tunnel to the FortiGate for secure web access.
   • DIt redirects the user's web browser traffic to the FortiGate's proxy for authentication and policy enforcement.
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   An administrator is configuring a VPN policy for user onboarding. The policy must support both SAML SSO and LDAP authentication, depending on the user's group. How can this be achieved on the FortiGate?

   • AUse a single VPN policy with SAML and configure the FortiGate to fall back to LDAP if SAML fails.
   • BCreate two separate VPN policies, one using SAML and one using LDAP, and assign them to different user groups.
   • CUse a single VPN policy with LDAP and configure the IdP to forward to LDAP.
   • DConfigure the VPN policy to use both SAML and LDAP simultaneously.
   Reveal Solution Discussion Select an answer first