FORTINET-NSE56 Practice Test 10 — 10 Questions

Question 1

You have imported a new FortiGate into FortiManager. Which operation must you perform to synchronize the existing policy package with the new device?

Accepted Answer

Perform an Import Policy operation.. Importing creates the configuration, but you must run 'Import Policy' to move the firewall policies into the ADOM database.

Answer

Upgrade the firmware.

Answer

Re-install the device settings.

Answer

Run a script to update the policy database.

Question 2

Which of the following is a valid method for importing a FortiGate configuration into FortiManager?

Accepted Answer

Upload the backup file via the 'Import' GUI option in the device list.. Direct connection from the FortiManager to the FortiGate via the Add Device wizard is the primary import method.

Answer

By modifying the FortiManager's config file manually.

Answer

Using a USB drive plugged into the FortiManager.

Answer

Emailing the configuration to the FortiManager.

Question 3

Which TWO of the following are common reasons for a policy installation failure in FortiManager?

Accepted Answer

Referenced objects missing on the target device.. Conflicts in object references or synchronization issues are frequent causes of failure.

Answer

Device firmware is too new.

Answer

Too many policies in the package.

Answer

The administrator password is incorrect.

Question 4

A FortiManager administrator attempted to install a policy package, but the installation failed due to an object conflict. Where can the administrator view the detailed reason for the installation failure?

Accepted Answer

Policy & Objects > Task Monitor. The Task Monitor provides detailed logs and error messages for installation tasks, including specific object conflicts.

Answer

Device Manager > Revision History

Answer

System Settings > Event Log

Answer

Policy & Objects > Installation Targets

Question 5

A FortiADC is reporting 'Server Busy' for a pool member. What does this indicate?

Accepted Answer

The server has reached its max connection limit. The 'Server Busy' status usually means the server has reached its connection limit as defined in the server object.

Answer

The server is rejected by the health check

Answer

The server is down

Answer

The ADC is experiencing high CPU

Question 6

You are deploying FortiWeb in 'Reverse Proxy' mode. Where should the default gateway of the backend web servers point?

Accepted Answer

To the FortiWeb internal interface. In reverse proxy mode, the FortiWeb handles the traffic; the servers should communicate back through the load balancer or the network gateway.

Answer

To a secondary FortiGate

Answer

To the Loopback interface

Answer

Directly to the Internet

Question 7

Which TWO methods can be used to authenticate users for access to the FortiMail quarantine portal?

Accepted Answer

LDAP. FortiMail supports internal authentication and external services like LDAP or RADIUS.

Answer

Syslog

Answer

SNMP

Answer

ICMP

Question 8

You need to ensure that the FortiMail doesn't relay spam to external addresses. Which feature should be configured?

Accepted Answer

Outbound AntiSpam and relay control.. Setting up strict relaying/access control rules and AntiSpam profiles on outbound traffic is necessary to prevent relaying spam.

Answer

Increase storage.

Answer

Inbound relay policy.

Answer

Disable DNS.

Question 9

Which TWO of the following are mandatory steps when configuring an ADOM in FortiManager?

Accepted Answer

Assign a name to the ADOM. Enabling ADOMs and setting the mode are the primary requirements for initial setup.

Answer

Configure global policies

Answer

Schedule backups

Answer

Assign a firewall to the ADOM

Question 10

What is the consequence of deleting a device from an ADOM in FortiManager?

Accepted Answer

The FortiGate is no longer managed by that ADOM.. Deleting a device removes its configuration and status tracking from FortiManager, but does not affect the physical FortiGate.

Answer

The FortiGate is automatically rebooted.

Answer

The FortiGate will stop passing traffic.

Answer

The FortiGate configuration is wiped.