Fortinet NSE5_SSE_AD-7.6 Exam - Topic 3 Question 1 Discussion

Actual exam question for Fortinet's NSE5_SSE_AD-7.6 exam

Question #: 1
Topic #: 3

An existing Fortinet SD-WAN customer who has recently deployed FortiSASE wants to have a comprehensive view of, and combined reports for, both SD-WAN branches and remote users. How can the customer achieve this?

AForward the logs from FortiSASE to Fortinet SOCaaS.

BForward the logs from FortiGate to FortiSASE.

CForward the logs from FortiSASE to the external FortiAnalyzer.

DForward the logs from the external SD-WAN FortiAnalyzer to FortiSASE.

Show Suggested Answer

Suggested Answer: C

For customers with hybrid environments (on-premises SD-WAN branches and remote FortiSASE users), the FortiOS 7.6 and FortiSASE curriculum recommends centralized log aggregation for unified visibility.

Centralized Reporting: The standard architectural best practice is to forward logs from FortiSASE to an external FortiAnalyzer (Option C).

Unified View: Since the customer's on-premises FortiGate SD-WAN branches are already sending logs to an existing FortiAnalyzer, adding the FortiSASE log stream to that same FortiAnalyzer allows for the creation of combined reports.

Fabric Integration: This setup leverages the Security Fabric, enabling the FortiAnalyzer to provide a single pane of glass for monitoring security events, application usage, and SD-WAN performance metrics across the entire distributed network.

Why other options are incorrect:

Option A: SOCaaS is a managed service for threat monitoring, not a primary tool for an administrator to generate combined SD-WAN/SASE operational reports.

Option B: FortiSASE is not designed to act as a log collector or reporting hub for external on-premises FortiGates.

Option D: Data flows from the source (FortiSASE) to the collector (FortiAnalyzer), not the other way around.

by Lorean at Jan 24, 2026, 09:05 PM

Limited Time Offer

25%

Off

Get Premium NSE5_SSE_AD-7.6 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Laura

1 day ago

Option A seems like the way to go. Sending the FortiSASE logs to Fortinet SOCaaS should provide the combined reporting the customer needs.

upvoted 0 times

...

Antonio

6 days ago

Haha, option D is just silly. Forwarding logs from the SD-WAN FortiAnalyzer to FortiSASE? That's like putting the cart before the horse!

upvoted 0 times

...

Bobbye

12 days ago

I'm not sure about option B. Forwarding logs from FortiGate to FortiSASE doesn't seem like the right approach here.

upvoted 0 times

...

France

17 days ago

Option C looks good to me. Forwarding the logs from FortiSASE to the external FortiAnalyzer should give the customer a comprehensive view.

upvoted 0 times

...

Johana

22 days ago

I vaguely recall something about SOCaaS, but I'm not confident if that applies to getting combined reports for both branches and remote users.

upvoted 0 times

...

Teddy

27 days ago

I'm leaning towards option C, but I feel like I need to double-check if forwarding logs from FortiGate to FortiSASE is actually necessary.

upvoted 0 times

...

Amber

2 months ago

I remember a practice question where we had to consider log forwarding between FortiGate and FortiSASE. Could that be relevant here?

upvoted 0 times

...

Reid

2 months ago

I think forwarding logs from FortiSASE to FortiAnalyzer makes sense for a comprehensive view, but I'm not entirely sure if that's the best option.

upvoted 0 times

...

Launa

2 months ago

I'm not sure about this one. I'll need to carefully read through the options and think about how the Fortinet products work together.

upvoted 0 times

...

Ciara

2 months ago

This is straightforward, I've seen this type of integration question before. I'm confident I can identify the right approach.

upvoted 0 times

...

Alona

2 months ago

Okay, I think I've got a strategy here. I'll need to focus on how the logs can be shared between the different Fortinet products to get that comprehensive view.

upvoted 0 times

...

Viva

3 months ago

Hmm, I'm a bit confused on the relationship between FortiSASE and the SD-WAN components. I'll need to review my notes on integrating these solutions.

upvoted 0 times

...

Ardella

3 months ago

This seems like a tricky one. I'll need to think through the different options carefully.

upvoted 0 times

...