FORTINET-NSE56 Practice Test 16 — 15 Questions

Question 1

You are experiencing delays in mail delivery. Where is the best place to check for queued messages?

Accepted Answer

Mail Queue.. The 'Mail Queue' monitoring page shows all messages currently awaiting delivery or retry.

Answer

System dashboard.

Answer

AntiSpam log.

Answer

Routing policy.

Question 2

Which THREE types of logs can be generated by FortiWeb?

Accepted Answer

Event Log. FortiWeb logs include traffic, attack, and system events for comprehensive auditing.

Answer

Packet Capture Log

Answer

User Billing Log

Question 3

You need to implement a persistence method in FortiADC where the user is tied to the server based on the cookie provided by the backend application. Which method do you choose?

Accepted Answer

Cookie Persistence. Cookie-based persistence, specifically 'Insert Cookie' or 'Passive Cookie', is the standard for application-level persistence.

Answer

Source IP Persistence

Answer

Round Robin

Answer

Least Connections

Question 4

Which THREE items are required to successfully integrate a FortiAuthenticator with an Active Directory (AD) environment for identity-based policies?

Accepted Answer

Service account with read permissions. You need the AD server details, a service account with read access, and the domain credentials to bind to the directory.

Answer

A list of all client machine MAC addresses

Answer

The AD database file export

Question 5

Which of the following is a symptom of a full quarantine storage?

Accepted Answer

Inability to save new emails to the quarantine.. When storage is full, the system may stop accepting new quarantined items or fail to save new mail.

Answer

Slow email delivery.

Answer

Loss of admin access.

Answer

Increased spam.

Question 6

Which of these is a benefit of 'Transparent' mode?

Accepted Answer

It requires no changes to mail server settings.. Transparent mode allows for installation without reconfiguring mail servers, providing ease of deployment.

Answer

It is faster than Gateway mode.

Answer

It supports only one domain.

Answer

It hides the mail server IP.

Question 7

Which FortiAuthenticator feature allows you to map LDAP groups to local FortiAuthenticator groups for administrative access?

Accepted Answer

Group Mapping. Group mapping enables the synchronization of external directory groups with internal policies.

Answer

SSO Domain

Answer

LDAP Filter

Answer

RADIUS Client

Question 8

Which object in FortiWeb is used to define the specific web server or virtual host that the WAF should inspect?

Accepted Answer

Server Policy. A Server Policy in FortiWeb defines the virtual server and the rules applied to it.

Answer

Inspection Profile

Answer

Server Object

Answer

Virtual Host Profile

Question 9

Which TWO products provide identity-based security within the Fortinet portfolio?

Accepted Answer

FortiGate. FortiGate and FortiAuthenticator work together to provide identity-based access control.

Answer

FortiSwitch

Answer

FortiAP

Answer

FortiADC

Question 10

You are configuring a FortiADC virtual server with SSL offloading. The backend servers require the original client IP to be preserved. What feature do you enable?

Accepted Answer

X-Forwarded-For header insertion. The X-Forwarded-For header is the standard way to inject the client IP into the HTTP request headers for the backend server.

Answer

HTTP compression

Answer

SSL session resumption

Answer

Source IP NAT

Question 11

You are integrating FortiAuthenticator with a FortiGate to provide SSO for VPN users. The users are successfully authenticating against AD, but they are not being assigned the correct group-based firewall policies. What is the most likely cause?

Accepted Answer

RADIUS VSAs are not correctly configured to include group information. FortiAuthenticator must pass the group membership information to the FortiGate via the RADIUS VSA (Vendor Specific Attribute) or FSSO, and the FortiGate must be configured to map these groups.

Answer

The FortiGate is not joined to the AD domain

Answer

The VPN tunnel is using IKEv1 instead of IKEv2

Answer

The FortiAuthenticator is in local authentication mode

Question 12

Which component of the FortiAuthenticator is responsible for the self-service portal where users can manage their own two-factor authentication tokens?

Accepted Answer

User Portal. The User Portal is the dedicated interface for end-users to manage their accounts and 2FA tokens.

Answer

AD Connector

Answer

Admin GUI

Answer

RADIUS Server

Question 13

A developer wants to use a REST API to configure FortiADC objects. Where can you find the documentation and schema for the FortiADC API?

Accepted Answer

In the API Explorer within the FortiADC GUI. The API documentation is accessible directly through the FortiADC web interface.

Answer

On the FortiGuard portal

Answer

In the CLI reference guide

Answer

By calling technical support

Question 14

When integrating FortiAuthenticator with a Windows Active Directory, why is it recommended to use a service account with limited privileges?

Accepted Answer

To adhere to the principle of least privilege. Following the principle of least privilege ensures that the compromise of the service account does not compromise the entire domain.

Answer

To allow easier backup

Answer

To increase speed

Answer

To bypass password expiration

Question 15

Which THREE of the following are core components of the Fortinet Security Fabric?

Accepted Answer

FortiGate. FortiGate, FortiAnalyzer, and FortiManager are the primary pillars of the Security Fabric.

Answer

Standard Web Browser

Answer

Third-party printer