FORTINET-NSE56 Practice Test 22 — 15 Questions

Question 1

A user reports that legitimate emails are being quarantined due to a high spam score. You want to add the sender's email address to a whitelist. Where should this be configured to be effective for the specific user?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Personal Safe List in the quarantine portal. The Personal Address Book or the per-user Safe List in the user's quarantine portal allows for individual whitelisting.

Answer

AntiSpam profile block list

Answer

Recipient policy whitelist

Answer

System global whitelist

Question 2

Which TWO of the following are primary functions of a Web Application Firewall (WAF) like FortiWeb?

Accepted Answer

Offloading SSL/TLS processing from backend servers. WAFs protect against OWASP Top 10 vulnerabilities and provide SSL termination/offloading for web applications.

Answer

Managing local user account provisioning

Answer

Performing deep packet inspection for malware on email attachments

Answer

Routing static IP traffic between subnets

Question 3

In a FortiADC deployment, you need to ensure that the load balancer terminates SSL connections from clients and initiates a new connection to the backend server. Which feature should you configure?

Accepted Answer

SSL Offloading. SSL Offloading (or SSL Termination) allows the FortiADC to decrypt the traffic, inspect it, and then re-encrypt it before sending it to the backend.

Answer

Server Persistence

Answer

HTTP Header Insertion

Answer

Layer 4 Load Balancing

Question 4

When using FortiMail in Server Mode, how does the appliance handle incoming mail?

Accepted Answer

It accepts mail directly for local mailboxes and provides access via POP3/IMAP.. In Server Mode, FortiMail acts as the actual mail server (providing POP3/IMAP/Webmail services), so it receives mail directly for local domains.

Answer

It only filters outgoing mail.

Answer

It relays all mail to an internal backend mail server.

Answer

It inspects traffic in-line without terminating the connection.

Question 5

In a FortiWeb high-availability cluster, how are the synchronization settings for SSL certificates managed?

Accepted Answer

Automatic sync via the HA configuration. SSL certificates must be synchronized across the cluster to ensure consistent decryption of incoming traffic.

Answer

Manual file upload to each node

Answer

Using a shared external NFS mount

Answer

Via FortiManager only

Question 6

Which TWO parameters must match between the FortiAuthenticator and the FortiGate when configuring RADIUS authentication?

Accepted Answer

Server IP Address. Shared secret and server IP address are essential for RADIUS communication.

Answer

RADIUS port

Answer

Device MAC address

Answer

System hostname

Question 7

When configuring 'Global Objects' in FortiManager, what happens to the specific objects in the ADOM-level database?

Accepted Answer

They are referenced by the ADOM.. Global objects can override or be assigned to ADOMs, ensuring consistent configuration across the organization.

Answer

They are hidden from the administrator.

Answer

They are deleted.

Answer

They are converted to CLI commands.

Question 8

When modifying a policy package, what does 'Lock' indicate?

Accepted Answer

The package cannot be edited by other admins.. Locking prevents other administrators from making changes to the policy package simultaneously.

Answer

The package is deleted.

Answer

The package is ready to be pushed.

Answer

The package is corrupted.

Question 9

You are configuring FortiWeb in reverse proxy mode. A client is receiving 403 Forbidden errors for legitimate traffic due to a SQL injection false positive. Which feature should you modify to allow this traffic while maintaining security?

Accepted Answer

Create a WAF Exception for the specific signature ID. Custom signatures or exception rules allow for granular bypassing of specific signatures that trigger false positives.

Answer

Enable Auto Learning

Answer

Disable the SQL Injection scanner entirely

Answer

Switch to Transparent mode

Question 10

You are debugging a SAML authentication issue where FortiAuthenticator is the IDP. The logs show 'Assertion expired'. What is the most likely cause?

Accepted Answer

Time skew between IDP and SP. Time skew between the IDP and SP (Service Provider) is the most common cause of expired assertion errors.

Answer

The browser is blocked

Answer

The SAML certificate is self-signed

Answer

The user password is too old

Question 11

An administrator wants to ensure that a specific policy is always included in all policy packages within an ADOM. What feature should be used?

Accepted Answer

Global Policy.. Global Policies allow for centrally defined rules that are inherited by all packages in the ADOM.

Answer

Script.

Answer

Provisioning Template.

Answer

Standard Policy.

Question 12

An administrator is attempting to move a device from one ADOM to another. Which condition must be met for this to succeed?

Accepted Answer

The device must not be assigned to any policy package.. Devices must be removed from all policy packages and have their configuration synchronized before they can be moved between ADOMs.

Answer

The device must be in an 'Unregistered' state.

Answer

The device must be placed in a 'Group' folder first.

Answer

The device must be running the latest firmware version.

Question 13

What is the primary function of the Security Fabric's 'Automation Stitch' feature?

Accepted Answer

To trigger actions based on system events. Automation Stitches trigger actions based on specific events detected by the Security Fabric.

Answer

To synchronize user databases

Answer

To scan for vulnerabilities

Answer

To load balance traffic

Question 14

You have multiple FortiADC nodes in a High Availability (HA) cluster. Which synchronization method ensures that the session table is shared between nodes to prevent user disconnects during a failover?

Accepted Answer

Session Synchronization. Session sync (or HA synchronization) is essential for maintaining stateful connections during failover.

Answer

Database Replication

Answer

VRRP Heartbeat

Answer

Configuration Sync

Question 15

Which THREE of the following are components of the Fortinet Security Fabric that can provide telemetry or data to the FortiGate?

Accepted Answer

FortiAP. The Security Fabric is designed to integrate FortiSwitch, FortiAP, FortiAnalyzer, and other devices for shared intelligence.

Answer

A local DNS server without a Forti agent

Answer

A standard third-party unmanaged switch