FORTINET-NSE56 Practice Test 11 — 15 Questions

Question 1

How can you view the 'Total' number of policies in a specific policy package?

Accepted Answer

In the Policy & Objects tab list view.. The status bar at the bottom of the policy list displays the total number of policies in the currently selected package.

Answer

In the Device Manager.

Answer

Using a CLI script.

Answer

By going to the Dashboard.

Question 2

Which setting in the 'System Settings' is used to define the administrator's password policy?

Accepted Answer

Administrator settings.. Admin password policies are managed within the Administrator settings section of System Settings.

Answer

Device Manager.

Answer

Policy & Objects.

Answer

FortiGuard.

Question 3

Which component in FortiManager is responsible for managing the logical grouping of multiple FortiGate devices that share the same policy package?

Accepted Answer

Policy Package. Folders in the Device Manager are used to organize devices, but 'Policy Packages' are the logical unit used to group devices for policy application.

Answer

Firmware Template

Answer

ADOM

Answer

Device Group

Question 4

Which of the following is a mandatory step when creating a new ADOM in FortiManager?

Accepted Answer

Selecting a firmware version.. An ADOM must have a version selected that matches the firmware version of the FortiGate devices it will manage.

Answer

Assigning an IP address.

Answer

Defining a policy package.

Answer

Configuring SNMP.

Question 5

An administrator is using the 'Policy Lookup' tool in FortiManager. What does this tool provide?

Accepted Answer

It identifies which policy matches a specific traffic scenario.. Policy Lookup allows admins to test traffic flow by entering source, destination, and service to see which policy would match.

Answer

It shows which user is logged in.

Answer

It modifies traffic parameters.

Answer

It scans for unused objects.

Question 6

What is the purpose of the 'Add Device' wizard?

Accepted Answer

To register a new device to be managed by FortiManager.. The wizard simplifies the process of registering a new FortiGate by prompting for IP, credentials, and ADOM assignment.

Answer

To update the FortiGate firmware.

Answer

To migrate policies.

Answer

To configure VPN tunnels.

Question 7

An administrator needs to enforce DMARC 'reject' policy for incoming mail. Where is this enforced in FortiMail?

Accepted Answer

AntiSpam profile. DMARC settings are managed within the 'AntiSpam' profile under 'Domain settings' or specific DMARC control configurations.

Answer

Access Control rules

Answer

Antivirus policy

Answer

Routing policy

Question 8

Which THREE actions can be performed on a policy package within the Policy & Objects tab?

Accepted Answer

Clone. Policy packages support cloning, deleting, and locking as part of their management lifecycle.

Answer

Factory Reset

Answer

Firmware Upgrade

Question 9

Which TWO of the following are valid methods to back up a FortiManager configuration?

Accepted Answer

Manual backup via the System Settings GUI.. Backups can be performed manually via the GUI or scheduled as a system task.

Answer

Copying files via USB drive.

Answer

Using the 'Backup' button on the FortiGate.

Answer

Automatic cloud sync to FortiCloud.

Question 10

Which TWO of the following are true about 'Scripts' in FortiManager?

Accepted Answer

They can be scheduled to run at specific times.. Scripts can be executed on devices and can be stored for reusability.

Answer

They can only be run once.

Answer

They automatically convert to policies.

Answer

They require a separate license.

Question 11

You are troubleshooting a sync issue where a device shows 'Modified' status in the Device Manager. What is the most likely cause?

Accepted Answer

The configuration on the FortiGate was changed locally.. A 'Modified' status indicates the configuration on the FortiGate has diverged from the configuration stored in the FortiManager database.

Answer

The FortiManager license has expired.

Answer

The FortiManager firmware is outdated.

Answer

The policy package was deleted.

Question 12

What is the purpose of 'Revision History' when it comes to policy packages?

Accepted Answer

To store and revert changes made to policies.. It allows administrators to maintain versions of policy packages, facilitating easy rollbacks if a change causes issues.

Answer

To synchronize objects across ADOMs.

Answer

To generate audit reports.

Answer

To archive logs.

Question 13

Which TWO of the following are valid ways to monitor the status of managed FortiGate devices in the Device Manager?

Accepted Answer

ADOM-level dashboard. Device manager provides real-time connection status and sync status indicators.

Answer

License expiry alert

Answer

Global policy report

Answer

Firmware log

Question 14

Which THREE settings are required for successful DKIM signing on outgoing mail?

Accepted Answer

Domain definition. DKIM signing requires a key, a selector, and the configuration of the signing domain.

Answer

User password

Answer

SMTP port 25 configuration

Question 15

What is the primary role of the 'Administrator' profile?

Accepted Answer

To manage administrative access and permissions.. The admin profile manages access rights and permissions for different user accounts managing the FortiMail.

Answer

To store quarantined emails.

Answer

To filter email content.

Answer

To configure mail routing.