Home Certifications Editorials

Exam overview and study plan

NSE5-SASE-SDWAN-26 Practice Questions

Fortinet NSE 5 - FortiSASE and SD-WAN 26 Core Administrator

Read questions, check verified answers and discuss the reasoning. Use reading options to shape your revision, or switch to the simulator for timed practice.

View 25 free questions

25 questions in this view

Page 1 of 5

Question 1

A FortiSASE administrator is configuring data loss prevention (DLP) controls in FortiSASE to identify and enforce policies on Microsoft Information Protection (MIP)–labeled files when users upload data to SaaS and cloud storage applications.

What does FortiSASE primarily use to detect MIP-labeled files?

File GUID
File extension
File hash
Filename pattern

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

Refer to the exhibit.

The exhibit shows output of the command diagnose sys sdwan service4 collected on a FortiGate device.

The administrator wants to know through which interface FortiGate will steer traffic from local users on subnet 10.0.1.0/255.255.255.192 and with a destination of the social media application Facebook.

Based on the exhibits, which two statements are correct? (Choose two.)

Diagnose output

When FortiGate cannot recognize the application of the flow, it load balances the traffic through the tunnels HQ_T1, HQ_T2, HQ_T3.
FortiGate steers traffic for social media applications according to the service rule 2 and steers traffic through port2.
When FortiGate cannot recognize the application of the flow, it steers the traffic through the preferred member of rule 3, HQ_T1.
There is no service defined for the Facebook application, so FortiGate applies service rule 3 and directs the traffic to headquarters.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

Which key capabilities are provided by Fortinet SOCaaS when integrated with FortiSASE? (Choose two.)

Endpoint patch management and software update automation across all devices
DNS filtering and URL categorization for web access control
24/7 monitoring and managed threat detection by Fortinet SOC analysts across SASE traffic flows
Centralized incident investigation and coordinated threat response across distributed users and branches

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

Which three challenges in a work-from-anywhere environment does FortiSASE address? (Choose three.)

Inconsistent security levels
Remote internet connectivity
Lack of visibility and control
Lack of bandwidth
Poor performance

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

A FortiSASE administrator is configuring FortiSASE and must enforce a policy that prevents endpoints located in specific countries from establishing a connection to the service. The solution must ensure access is blocked based on geographic location rather than user identity or device posture.

Which configuration method should be used to achieve this requirement?

Endpoint network lockdown profile configuration
Geofencing policy to restrict access by country
Source IP anchoring for country-based restriction
Geo-based address object used as the source in a deny policy

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

In an agentless FortiSASE deployment using Proxy mode, remote users access the service through an explicit proxy configuration.

Which statement best describes how traffic is handled in this deployment mode?

Only DNS queries are sent to FortiSASE for security inspection, while web traffic is processed locally
Only HTTP and HTTPS traffic is redirected to FortiSASE, while other traffic bypasses it and goes directly to the internet
Only web traffic is tunneled through FortiSASE using a VPN client installed on the endpoint
Only unknown applications traffic, is routed through FortiSASE for inspection

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Page 1 of 5

Build confidence for exam day with expert-reviewed questions and realistic practice. Your next certification starts here.

Company

About Contact Our Authors FAQ

Trust and policies

Methodology Editorial policy Terms and conditions Privacy policy

Contact

ExamPrepare LLC5203 Juan Tabo Blvd STE 2BAlbuquerque, NM 87111[email protected]

© 2026 ExamPrepare LLC. All rights reserved. All certification names, exam codes and logos are the property of their respective owners. All associated trademark and copyright rights belong to those owners. ExamPrepare is not affiliated with, endorsed by, or sponsored by any certification vendor.