Use Available User Onboarding Methods NSE5-SD-WAN-CORE-ADMINISTRATOR Practice Questions (Page 7)

Questions 31–34

1. 31foundation · easy

   In a SAML SSO configuration, what is the role of the 'Identity Provider' (IdP)?

   • AIt is a database that stores user passwords in plain text.
   • BIt is the entity that authenticates the user and issues an assertion about their identity.
   • CIt is the service that the user wants to access, such as the FortiGate.
   • DIt is a network device that routes SAML traffic between the user and the FortiGate.
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   An administrator is configuring SAML SSO for VPN onboarding. The SAML IdP requires a specific entity ID and ACS URL. The FortiGate's SAML configuration must match these. Which settings on the FortiGate must be aligned with the IdP's configuration?

   • AThe FortiGate's VPN tunnel name and the IdP's application name.
   • BThe FortiGate's certificate and the IdP's certificate.
   • CThe FortiGate's IP address and the IdP's IP address.
   • DThe FortiGate's entity ID and the ACS (Assertion Consumer Service) URL.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A company wants to enforce per-user web filtering policies for employees who work both in the office and remotely. They already have FortiClient deployed on all managed endpoints. The SD-WAN administrator needs to ensure that user identity is available to the FortiGate for policy enforcement regardless of the user's location. What should the administrator configure?

   • ADeploy an agentless proxy client on each endpoint to forward web traffic to the FortiGate for user identification.
   • BConfigure the FortiGate as a RADIUS client to authenticate users against the corporate RADIUS server for all traffic.
   • CCreate a VPN policy that requires users to authenticate via SAML before accessing the network.
   • DEnable FortiClient telemetry and configure the FortiGate to accept FortiClient user identity information via the EMS/FortiClient fabric connection.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   What is the primary difference between RADIUS and LDAP in the context of remote authentication?

   • ARADIUS uses port 389, while LDAP uses port 1812.
   • BRADIUS is used for network access authentication, while LDAP is used for directory access and user lookup.
   • CRADIUS is only used for VPN authentication, while LDAP is only used for web authentication.
   • DRADIUS is a directory service, while LDAP is a protocol for network access.
   Reveal Solution Discussion Select an answer first