NSE5_SSE_AD-7.6

Review 49 NSE5-SSE-AD-7-6 practice questions with answer explanations and community insights.

Question 1

Refer to the exhibit. How does FortiGate handle the traffic with the source IP 10.0.1.130 and the destination IP 128.66.0.125?

  1. FortiGate steers the traffic flow through port2.
  2. FortiGate routes the traffic flow according to the FIB.
  3. FortiGate load balances the traffic flow through port1 and port2.
  4. FortiGate drops the traffic flow.

Question 2

Which statement is true about scheduling a FortiClient upgrade using an endpoint upgrade rule?

  1. When scheduled, the installation always starts immediately if the endpoint is online.
  2. An endpoint upgrade rule can be assigned to a user group.
  3. Scheduled upgrades automatically reboot macOS endpoints after installation.
  4. If the scheduled time is already past in the local time zone of the endpoint, installation starts the next day at that time.

Question 3

Which three factors about SLA targets and SD-WAN rules should you consider when configuring SD-WAN rules? (Choose three.)

  1. When configuring an SD-WAN rule, you can select multiple SLA targets from different performance SLAs.
  2. SLA targets are used only by SD-WAN rules that are configured with a Lowest Cost (SLA) strategy.
  3. Member metrics are measured only if a rule uses the SLA target.
  4. SD-WAN rules can use SLA targets to check whether the preferred members meet the SLA requirements.
  5. When configuring an SD-WAN rule, you can select multiple SLA targets if they are from the same performance SLA.

Question 4

Which authentication method overrides any other previously configured user authentication on FortiSASE?

  1. RADIUS
  2. MFA
  3. Local
  4. SSO

Question 5

Which two configurations are required for Agentless ZTNA to work? (Choose two.)

  1. Proxy user single sign-on (SSO)
  2. FortiClient Agent
  3. FortiGate with ZTNA proxy
  4. SD-WAN Private Access SPA