FORTINET-NSE56 Practice Test 14 — 15 Questions

Question 1

Which DNS record must be published in the public DNS to enable DKIM signing for outgoing mail?

Accepted Answer

TXT record containing the public key. DKIM uses a public key published in a DNS TXT record so that receiving servers can verify the signature added to the email header.

Answer

PTR record

Answer

A record

Answer

MX record

Question 2

In which configuration area are 'Content Profiles' created and modified?

Accepted Answer

Profile settings.. Content profiles are managed under the 'Policy' or 'Profile' sections depending on the firmware version, focusing on content inspection.

Answer

Domain settings.

Answer

System settings.

Answer

Network settings.

Question 3

Which TWO methods can be used to perform 'Greylisting' in FortiMail?

Accepted Answer

By sender email address. Greylisting can be configured based on the sender's IP or the sender's email address.

Answer

By attachment type

Answer

By recipient password

Answer

By email subject

Question 4

Which component manages the 'Daily Report' schedule?

Accepted Answer

Report settings.. Report settings allow for the scheduling and delivery of summaries regarding system and email activity.

Answer

Access control rules.

Answer

Quarantine settings.

Answer

System logs.

Question 5

What is the primary function of the 'FortiToken'?

Accepted Answer

Two-factor authentication (2FA). FortiToken provides a secondary factor for authentication, enhancing account security.

Answer

User database management

Answer

Secure storage for passwords

Answer

VPN encryption

Question 6

Where do you configure the expiration period for messages in the quarantine?

Accepted Answer

Quarantine maintenance settings.. Quarantine maintenance settings allow defining how many days a message is kept before being purged.

Answer

Access rules.

Answer

System logs.

Answer

AntiSpam profile.

Question 7

Where do you configure the global whitelist to ensure specific email addresses are never blocked by AntiSpam?

Accepted Answer

AntiSpam profile. The global whitelist is found within the AntiSpam profile settings to ensure that senders are always allowed.

Answer

Access Control rules

Answer

System network settings

Answer

Mail Server settings

Question 8

How can you view the current number of emails in the quarantine?

Accepted Answer

On the dashboard.. The dashboard displays statistics about the quarantine, including count.

Answer

By running a hardware diagnostic.

Answer

In the policy editor.

Answer

In the system logs.

Question 9

What should you do to ensure that an encrypted email sent via IBE reaches the recipient correctly?

Accepted Answer

Configure the IBE settings and verify internet connectivity.. You must ensure that the recipient has a valid email address and that the FortiMail can reach the internet to send the notification.

Answer

Disable antivirus.

Answer

Increase the disk space.

Answer

Remove the sender from the whitelist.

Question 10

What is the function of the FortiGate's 'Security Fabric' connector?

Accepted Answer

To integrate with external platforms like AWS or Azure. Connectors link the Security Fabric to external cloud and virtualization platforms.

Answer

To connect to physical power outlets

Answer

To reset the firewall

Answer

To bypass the firewall

Question 11

Which FortiWeb feature is best used to detect 'Brute Force' attacks against a login page?

Accepted Answer

Rate Limiting / Thresholds. Threshold rules are used to limit the number of attempts within a specific window of time.

Answer

IP Reputation

Answer

Cookie signing

Answer

SQL Injection protection

Question 12

What is the purpose of the 'Session Limit' setting in an Access Control Rule?

Accepted Answer

To prevent DoS attacks by restricting concurrent connections.. Session limits prevent resource exhaustion by limiting the number of concurrent connections from a single IP.

Answer

To limit the number of users.

Answer

To control the speed of virus scanning.

Answer

To limit the total email storage space.

Question 13

How does FortiMail identify the policy to apply to an incoming email?

Accepted Answer

By the sender IP and recipient domain.. FortiMail evaluates the incoming connection and recipient information against the configured Access Control and Recipient policies.

Answer

By the size of the email.

Answer

By the file type.

Answer

By the subject line.

Question 14

Where do you check the current status of the FortiMail services?

Accepted Answer

On the dashboard.. The dashboard provides an overview of system status and active services.

Answer

In the system report.

Answer

In the quarantine folder.

Answer

In the mail log.

Question 15

How can you disable the 'Greylisting' feature for a specific, trusted sender?

Accepted Answer

Add them to the AntiSpam whitelist.. You can add the sender to a whitelist in the AntiSpam profile or use an exception list to bypass greylisting.

Answer

Increase the greylisting timer.

Answer

Delete their account.

Answer

Change their IP.