FORTINET-NSE56 Practice Test 17 — 15 Questions

Question 1

You are troubleshooting a scenario where FortiADC is failing to perform health checks on a backend server. Which log should you prioritize to identify the specific reason for the health check failure?

Accepted Answer

System Event Logs. The FortiADC system logs, specifically those related to health check events, provide details on why a node is marked as down.

Answer

Session Table Logs

Answer

Application Traffic Logs

Answer

Security Policy Logs

Answer

SNMP Traps

Question 2

You are integrating FortiWeb with FortiAnalyzer. What is the benefit of this integration in a Security Fabric context?

Accepted Answer

It provides centralized logging and advanced analytics. FortiAnalyzer provides centralized logging and advanced reporting capabilities for the entire Fabric, including FortiWeb.

Answer

It enables hardware acceleration on FortiWeb

Answer

It bypasses the need for WAF policies

Answer

It allows FortiWeb to perform SSL offloading

Question 3

Which TWO actions can be automated via a FortiGate Automation Stitch?

Accepted Answer

Quarantine a host. Automation stitches commonly trigger alerts (email/logs) or network actions (quarantine).

Answer

Modify the BIOS settings

Answer

Purchase hardware

Answer

Perform a software update on a server

Question 4

Which THREE are key benefits of using FortiWeb to protect web applications?

Accepted Answer

Protection against SQL Injection. FortiWeb protects against injection, provides SSL offloading, and offers compliance reporting.

Answer

Replacing the ISP

Answer

Physical security of the server room

Question 5

Which THREE objects are required to configure a basic load balancing setup in FortiADC?

Accepted Answer

Virtual Server. Load balancing requires a real server, a server pool, and a virtual server to bind them.

Answer

WAF Policy

Answer

Content Routing Policy

Question 6

Which TWO of the following are true regarding FortiADC's ability to perform Layer 7 load balancing?

Accepted Answer

It can route traffic based on HTTP headers or URL patterns. Layer 7 load balancing allows for content-based routing and cookie-based persistence.

Answer

It requires all backend servers to be on the same subnet

Answer

It only supports TCP-based traffic

Answer

It cannot perform health checks on web servers

Question 7

When scheduling a report, what is the purpose of the 'Output Profile'?

Accepted Answer

Defining report formats and destinations. The output profile determines the format (PDF, HTML, CSV) and the destination of the generated report.

Answer

Configuring data retention

Answer

Setting the report time range

Answer

Adding user permissions

Question 8

What is the maximum number of ADOMs supported on a FortiAnalyzer?

Accepted Answer

Depends on the model. The number of ADOMs is limited by the specific hardware/VM model and licensing.

Answer

50

Answer

10

Answer

Infinite

Question 9

Which THREE components are required to create a functional FortiSoC Playbook?

Accepted Answer

Workflow Actions. A playbook requires a trigger, a workflow of actions, and a target device or connector.

Answer

Report Template

Answer

Log retention policy

Question 10

Which protocol is utilized for log forwarding between FortiAnalyzer units?

Accepted Answer

OFTP. FortiAnalyzer uses the proprietary OFTP protocol to securely forward logs between devices.

Answer

SNMP

Answer

Syslog

Answer

HTTPS

Question 11

A FortiAnalyzer is failing to receive logs from a FortiGate. After verifying the IP connectivity and the FortiGate registration status, which setting should be checked next?

Accepted Answer

FortiGate log-server configuration. The 'log-server' setting on the FortiGate must be correctly configured to point to the FortiAnalyzer IP.

Answer

Report scheduling

Answer

FortiView update interval

Answer

FortiAnalyzer Device registration status

Question 12

Which dashboard widget provides a high-level summary of system resource usage?

Accepted Answer

System Information. The 'Dashboard' includes a System Information widget showing CPU/Memory/Disk usage.

Answer

Report Settings

Answer

Log View

Answer

FortiView Threats

Question 13

When using FortiSoC playbooks, what is the 'Connector' used for?

Accepted Answer

Integrating with external systems. Connectors are used to integrate FortiAnalyzer with external systems like FortiGate or email servers for automated actions.

Answer

Filtering log traffic

Answer

Managing device firmware

Answer

Linking logs to reports

Question 14

What is the purpose of 'Auto-cache' for reports?

Accepted Answer

To speed up report generation. Auto-cache pre-calculates the data for a report to ensure it can be generated quickly on demand.

Answer

To compress logs

Answer

To alert admins

Answer

To save logs to disk

Question 15

Which TWO FortiAnalyzer tools help in troubleshooting connection issues?

Accepted Answer

Device Manager. The 'Device Manager' shows connection status and the 'CLI' allows for network diagnostic commands (ping/traceroute).

Answer

Log View

Answer

Report module

Answer

FortiView map