FORTINET-NSE56 Practice Exam 3 — 20 Questions

Question 1

When an email is encrypted using FortiMail's Identity-Based Encryption (IBE), what does the recipient receive?

Accepted Answer

A notification email with a link to the secure portal.. With IBE, the recipient gets a notification email with a link to a secure portal where they can read the encrypted message.

Answer

The email is blocked.

Answer

A password protected PDF file.

Answer

The encrypted message attached to the email.

Question 2

What must occur before a FortiGate can be managed by a specific ADOM in FortiManager?

Accepted Answer

The FortiGate must be added and authorized in the Device Manager.. The FortiGate must be added to the ADOM and authorized by an administrator.

Answer

The ADOM must be in 'Advanced' mode.

Answer

A policy package must be created first.

Answer

The FortiGate must be in a 'Disconnected' state.

Question 3

If you need to change the log storage retention period for a specific ADOM, where is this setting located?

Accepted Answer

ADOM Log Policy. Each ADOM has its own 'Log Policy' or 'Disk Quota' configuration.

Answer

FortiView Filters

Answer

Report Settings

Answer

Global System Settings

Question 4

When adding a FortiGate to a FortiAnalyzer, which information is required?

Accepted Answer

Device serial number. You need the serial number and the IP/registration configuration on the FortiGate side.

Answer

The admin password of the FortiAnalyzer

Answer

The SQL database password

Answer

The log file format

Question 5

What does the 'FortiView' module provide?

Accepted Answer

Visual traffic analytics. FortiView provides a visual representation of network traffic and threats.

Answer

Configuration templates

Answer

Raw log data

Answer

Firmware management

Question 6

What is the function of the 'Device Manager' in FortiAnalyzer?

Accepted Answer

To manage registered devices. Device Manager is where Fortinet devices are registered and their connection status is monitored.

Answer

To view live threats

Answer

To create playbooks

Answer

To run reports

Question 7

Which TWO actions are commonly performed within the 'Device Manager' module?

Accepted Answer

Monitoring device connection status. Device Manager is for registering devices and managing their connection status.

Answer

Creating custom reports

Answer

Archiving old log files

Answer

Configuring event handlers

Question 8

When using 'Provisioning Templates', which setting allows you to automatically apply CLI commands to new devices as soon as they are added to the FortiManager?

Accepted Answer

Device Templates. The 'Provisioning Template' feature allows the association of CLI scripts to be executed upon successful device registration.

Answer

Auto-Link

Answer

ADOM Policies

Answer

Install On Install

Question 9

When deploying a policy package, what is the function of the 'Policy Package Status' column in the Install Wizard?

Accepted Answer

It indicates if the package is in sync with the device.. It displays whether the policy package has been successfully installed on the device.

Answer

It displays the device firmware version.

Answer

It shows the last modified date.

Answer

It shows the number of policies in the package.

Question 10

Which protocol does FortiAnalyzer primarily use for Web UI access?

Accepted Answer

HTTPS. FortiAnalyzer uses HTTPS for secure web management.

Answer

SSH

Answer

FTP

Answer

HTTP

Question 11

Which of the following is true about 'Report Data Masking'?

Accepted Answer

It masks sensitive information. Data masking allows you to hide sensitive information (like internal IPs or usernames) in reports while maintaining the ability to see trends.

Answer

It encrypts the report file

Answer

It deletes the logs

Answer

It hides the entire report

Question 12

Which TWO of the following are valid options for FortiMail deployment?

Accepted Answer

Gateway mode. FortiMail supports Gateway, Transparent, and Server modes.

Answer

Proxy mode

Answer

NAT mode

Answer

Endpoint mode

Question 13

Which THREE actions can be taken by a DLP filter when a match is found?

Accepted Answer

Encrypt. DLP filters can be configured to log, quarantine, or block/reject messages based on the rule.

Answer

Modify sender

Answer

Route to another interface

Question 14

An administrator wants to ensure that all outgoing emails are archived to a secondary server. Where is this configured?

Accepted Answer

Archiving policy. Archiving policies are configured to define the source and destination for email archival.

Answer

Access Control rule

Answer

AntiSpam profile

Answer

Routing policy

Question 15

What is the main advantage of using the FortiMail 'Quarantine' portal for end-users?

Accepted Answer

It allows users to manage their own quarantined emails.. The portal empowers users to manage their own spam, reducing the load on IT administrators.

Answer

It hides spam messages.

Answer

It deletes all mail automatically.

Answer

It provides full system logs.

Question 16

Which THREE of the following are true regarding 'Revision History'?

Accepted Answer

It stores snapshots of device configurations.. Revision history creates snapshots of configs, allows comparing versions, and enables restoration.

Answer

It restricts administrative access.

Answer

It automatically deletes old logs.

Question 17

When managing policy packages, what does the 'Policy Package' clone feature do?

Accepted Answer

It creates a duplicate of the package.. Cloning creates an exact copy of a policy package, which is useful for creating variations for different deployments.

Answer

It merges two packages into one.

Answer

It resets the package to factory defaults.

Answer

It deletes the original package.

Question 18

Which tab in the FortiManager GUI is primarily used for managing firewall policies and objects?

Accepted Answer

Policy & Objects. The Policy & Objects tab is the central location for managing firewall rules, addresses, services, and schedules.

Answer

FortiView

Answer

Device Manager

Answer

System Settings

Question 19

Which protocol does FortiManager use to communicate with managed FortiGate devices?

Accepted Answer

FMG protocol.. FortiManager uses the FortiManager protocol (FMG protocol) which typically operates over TCP port 541.

Answer

SSH.

Answer

SNMP.

Answer

HTTP.

Question 20

When using the Workflow mode for policy management, what happens immediately after a policy change request is submitted?

Accepted Answer

The policy is locked and sent to the approval queue.. In Workflow mode, the request is placed in a 'Pending' state and must be approved by an authorized administrator before it can be installed.

Answer

The policy is pushed to the device automatically.

Answer

The device immediately reboots.

Answer

The policy is applied to the 'Staging' ADOM.