FORTINET-NSE56 Practice Exam 4 — 20 Questions

Question 1

When using 'Log Forwarding', can you filter the logs before they are forwarded?

Accepted Answer

Yes, using log filters. Yes, you can apply filters to log forwarding profiles to only send specific traffic types.

Answer

Only for FortiAnalyzer destinations

Answer

No, all logs are forwarded

Answer

Only for Syslog

Question 2

What is the primary purpose of using 'Provisioning Templates' in FortiManager?

Accepted Answer

To standardize system settings like NTP, DNS, and logging on multiple devices.. Provisioning templates allow administrators to standardize global settings across multiple FortiGate devices automatically.

Answer

To manage FortiClient endpoints.

Answer

To create firewall policies across all devices.

Answer

To generate performance reports.

Question 3

Which THREE of the following are components of the 'Policy Package'?

Accepted Answer

Firewall policies.. Policy packages contain firewall policies, address objects, and services used by those rules.

Answer

Hardware interface settings.

Answer

Firmware images.

Question 4

Which method is the most efficient way to apply a specific set of CLI commands to 50 FortiGate devices simultaneously in FortiManager?

Accepted Answer

Using the Script Manager.. The Script Manager allows admins to define a set of commands and run them on multiple devices concurrently.

Answer

Updating the firmware.

Answer

Manual CLI access to each device.

Answer

Modifying the Provisioning Template.

Question 5

What is the function of the 'Check for Updates' feature in FortiManager's FortiGuard settings?

Accepted Answer

To update antivirus, IPS, and application control signatures.. This feature checks the FortiGuard servers for updates to services like IPS, AV, and Application Control databases.

Answer

To check for new FortiGate hardware models.

Answer

To verify the license key.

Answer

To update the FortiManager firmware.

Question 6

Which THREE of the following are benefits of using ADOMs in FortiManager?

Accepted Answer

Ability to manage different firmware versions.. ADOMs provide administrative separation, allow for different firmware version management, and improve scalability.

Answer

Increased throughput for traffic.

Answer

Automatic hardware upgrades.

Question 7

What is the primary benefit of using a 'Device Group' in FortiManager?

Accepted Answer

They allow for easier organization and bulk actions on devices.. Device groups help organize devices for easier reporting and management tasks.

Answer

They are required for ADOM creation.

Answer

They provide better firewall performance.

Answer

They enable automatic failover.

Question 8

You notice that the FortiMail system time is incorrect, causing issues with SSL/TLS certificate validation. How do you correct this?

Accepted Answer

Configure an NTP server.. System time is managed through NTP configuration to ensure synchronization with a reliable time server.

Answer

Disable SSL certificate validation.

Answer

Restart the system clock service.

Answer

Manually update via the CLI.

Question 9

Which THREE steps are required to implement a new firewall policy using the FortiManager workflow mode?

Accepted Answer

Submit the request for approval.. Workflow mode requires a sequential process of creating, reviewing, and approving changes.

Answer

Delete the original policy.

Answer

Reboot the FortiGate.

Question 10

Which THREE of the following are features of the FortiManager 'Global Settings'?

Accepted Answer

Admin user management.. Global settings cover administrative access, system time, and service parameters.

Answer

Per-device policy package management.

Answer

Automated firmware deployment.

Question 11

When using 'Install Wizard', what does the 'Auto-update' check-box do?

Accepted Answer

It automatically pushes changes to the device.. Auto-update, when enabled, keeps the FortiManager and device in sync after policy changes.

Answer

It triggers a backup.

Answer

It updates the device firmware.

Answer

It deletes duplicate policies.

Question 12

What happens when you change the 'Log Policy' to 'Archive only'?

Accepted Answer

Real-time analysis stops. The FortiAnalyzer will stop inserting logs into the SQL database, making them unavailable for reports and FortiView, storing them only as raw files.

Answer

Logs are deleted

Answer

The system reboots

Answer

The system automatically upgrades

Question 13

A FortiADC is load balancing an HTTPS application. You need to offload SSL processing to the ADC to reduce server load. What is the correct object to configure for this?

Accepted Answer

Client SSL Profile. SSL offloading requires a Client SSL profile applied to the Virtual Server to handle the handshake and decryption.

Answer

Content Routing Policy

Answer

Server SSL Profile

Answer

Layer 7 Persistence Rule

Question 14

Which TWO of the following protocols does FortiMail support for mail retrieval?

Accepted Answer

POP3. FortiMail supports POP3 and IMAP for accessing mailboxes.

Answer

FTP

Answer

HTTP

Answer

DNS

Question 15

What does the 'Heuristic' score measure in the AntiSpam engine?

Accepted Answer

The probability that the email content is spam.. Heuristic scores are generated by evaluating the structure and content of an email for common spam patterns.

Answer

The sender's reputation.

Answer

The attachment size.

Answer

The speed of the sender.

Question 16

When defining an Install Workflow, which THREE settings or options can be configured to manage the deployment process?

Accepted Answer

Set Notification Email. Workflow settings include approval requirements, notifications, and task locks.

Answer

Change Firmware automatically

Answer

Delete Policy after Install

Question 17

Which TWO types of report formats can be generated by FortiAnalyzer?

Accepted Answer

CSV. FortiAnalyzer supports generating reports in PDF, HTML, and CSV formats.

Answer

EXE

Answer

ISO

Answer

MP4

Question 18

Which TWO protocols are commonly used for external communication with FortiAnalyzer?

Accepted Answer

SSH. HTTPS is used for management and SSH for CLI, while Syslog/OFTP are for log traffic.

Answer

Telnet

Answer

POP3

Answer

HTTP

Question 19

What is the primary benefit of deploying FortiMail in a cluster?

Accepted Answer

To provide high availability and fault tolerance.. Clustering provides high availability and load balancing to ensure mail service continuity.

Answer

To bypass the need for a mail server.

Answer

To reduce the cost of licensing.

Answer

To increase the number of physical ports.

Question 20

An administrator wants to perform a 'Re-install Policy' on a subset of devices without changing their current configuration settings. Which install option should be selected?

Accepted Answer

Re-install Policy. When reinstalling, selecting 'Re-install Policy' only updates the firewall policies and objects, leaving existing device settings intact.

Answer

Install Config and Policy

Answer

Factory Reset and Install

Answer

Install Device Settings

Answer

Re-install Objects Only