FORTINET-NSE56 Practice Test 10 — 10 Questions

Question 1

What is the purpose of the 'Relay Host' setting in FortiMail?

Accepted Answer

To define the destination for outgoing mail.. The 'Relay Host' setting in FortiMail specifies the destination server to which outgoing mail is forwarded. It acts as a smart host or relay, directing email to the next-hop MTA for delivery. This is essential when FortiMail is not the final destination and needs to pass mail to an internal or external mail server.

Answer

To handle administrative login.

Answer

To store incoming mail.

Answer

To manage the quarantine.

Question 2

Which TWO of the following steps are required to integrate FortiAuthenticator with a FortiGate for RADIUS authentication?

Accepted Answer

Configure FortiAuthenticator as a RADIUS Server on FortiGate. Option C is correct because the FortiGate must be explicitly configured with a RADIUS server entry pointing to the FortiAuthenticator (via config user radius, specifying the FortiAuthenticator's IP and shared secret) so that the FortiGate can send authentication requests to it. Option E is correct because FortiAuthenticator only accepts RADIUS requests from clients it recognizes, so the FortiGate's IP address must be added as a RADIUS client (with a matching shared secret) under RADIUS Service > Clients on the FortiAuthenticator. Option A is not required for RADIUS authentication, since web certificates are used for HTTPS/SSL inspection or SAML, not RADIUS. Option B is not required because LDAP is a separate authentication protocol and FortiAuthenticator can act as a RADIUS server without enabling LDAP. Option D is not required because SAML is a different federation protocol used for single sign-on, not for RADIUS authentication.

Answer

Install a web certificate on the FortiGate

Answer

Enable LDAP on the FortiAuthenticator

Answer

Configure SAML on the FortiGate

Question 3

You are troubleshooting a FortiADC health check. The health check is failing even though the server is up. What should you verify first?

Accepted Answer

Expected Response code in the Health Check object. When a FortiADC health check fails despite the server being up, the most common cause is a mismatch between the expected response and what the server returns. The health check object defines an expected response code (for example, HTTP 200); if the server returns a different code (301, 403, 404), the check fails. Verifying this setting first is the fastest diagnostic step.

Answer

The ADC management IP

Answer

Server RAM utilization

Answer

The switch MTU

Question 4

Which THREE actions are available in the 'DLP' section of a policy?

Accepted Answer

Discard. In the DLP (Data Loss Prevention) section of a policy, the available actions are Discard (A), Log (D), and Quarantine (E). Discard (A) is correct because it blocks the transfer of sensitive data by dropping the file or message entirely. Log (D) is correct because it records the DLP event for auditing and monitoring without necessarily blocking the action. Quarantine (E) is correct because it isolates the sensitive data, often moving it to a secure location for review. Rename file (B) and Create copy (C) are not DLP policy actions; they are file operations that do not enforce data loss prevention.

Answer

Rename file

Answer

Create copy

Question 5

Which THREE items are found in the 'System Settings' area?

Accepted Answer

Administrators. In the System Settings area, option A 'Administrators' is correct because administrator accounts, profiles, and their access permissions are configured there. Option C 'Mail Server settings' is correct because the SMTP server used for alert emails and notifications is defined under System Settings. Option E 'Disk maintenance' is correct because disk-related tasks such as formatting, logging, and disk usage are managed in System Settings. Option B 'Report templates' is not part of System Settings; report templates are configured in the Reports section. Option D 'FortiView widget configuration' is not part of System Settings; FortiView widgets are configured in the FortiView/dashboard area.

Answer

Report templates

Answer

FortiView widget configuration

Question 6

Which TWO conditions must be met for a report to run successfully?

Accepted Answer

Report queries must be valid. Option A is correct because a report is generated by executing its underlying queries against the log data, so those queries must be syntactically and logically valid or the report generation will fail. Option C is correct because the logs the report draws on must actually reside in the database (the log store the report engine queries); if the relevant logs are not in the database, the report has no data source and cannot run successfully. The remaining options do not belong: archiving all logs (B) is not required for a report to run, collector mode (D) is a FortiAnalyzer operating mode rather than a prerequisite for report execution, and the FortiGate being offline (E) is irrelevant since reports are built from stored logs, not from a live device connection.

Answer

All logs must be archived

Answer

The system must be in collector mode

Answer

The FortiGate must be offline

Question 7

Which THREE items are checked by the AntiSpam profile during email processing?

Accepted Answer

SPF validation. The AntiSpam profile in email security gateways evaluates sender authenticity and reputation at the SMTP/header level, so SPF validation (A) is checked because the profile verifies whether the sending MTA's IP is authorized by the domain's SPF record to detect spoofing. Sender reputation via RBL (C) is also checked, as the profile queries real-time blocklists (DNSBL/RBL) against the connecting IP to reject known spam sources. DKIM verification (E) is included because the profile validates the cryptographic signature in the DKIM-Signature header to confirm message integrity and domain authentication. TLS certificate validation (B) belongs to transport-layer encryption handling, not spam scoring, and attachment file size (D) is enforced by content/size filtering policies rather than the AntiSpam profile.

Answer

TLS certificate validation

Answer

Attachment file size

Question 8

You need to ensure that the FortiMail doesn't relay spam to external addresses. Which feature should be configured?

Accepted Answer

Outbound AntiSpam and relay control.. To prevent FortiMail from relaying spam to external addresses, you configure Outbound AntiSpam together with relay control. Relay control defines who is allowed to relay mail through FortiMail (typically only authenticated/internal users), while outbound antispam scans mail leaving the organization so compromised accounts or internal spam cannot be relayed externally. Together they close the open-relay and outbound-spam paths.

Answer

Increase storage.

Answer

Inbound relay policy.

Answer

Disable DNS.

Question 9

An administrator is managing multiple FortiGate devices using FortiManager. They need to ensure that policy changes made in the ADOM are only pushed to specific firewalls. Which feature should they use to achieve granular control over policy deployment?

Accepted Answer

Policy Packages. Policy Packages in FortiManager are containers that group firewall policies and objects and are assigned to specific devices or device groups within an ADOM. By installing only the desired policy package to selected devices, the administrator achieves granular control over which firewalls receive which policy changes. This is the standard mechanism for scoped policy deployment.

Answer

Global Policy Packages

Answer

Provisioning Templates

Answer

Device Groups

Question 10

When configuring 'Global Objects' in FortiManager, what happens to the specific objects in the ADOM-level database?

Accepted Answer

They are referenced by the ADOM.. When an object is configured as a Global Object in FortiManager, it is stored in the Global Database (ADOM) and can be referenced by policies and objects within individual ADOMs. The ADOM-level database does not duplicate or delete the object; instead, it maintains a reference to the global object, allowing centralized management while still being usable in ADOM-specific policies.

Answer

They are hidden from the administrator.

Answer

They are deleted.

Answer

They are converted to CLI commands.