FORTINET-NSE56 Practice Test 3 — 25 Questions

Question 1

Which of the following is true about 'Report Data Masking'?

Accepted Answer

It masks sensitive information. Data masking allows you to hide sensitive information (like internal IPs or usernames) in reports while maintaining the ability to see trends.

Answer

It encrypts the report file

Answer

It deletes the logs

Answer

It hides the entire report

Question 2

Which TWO of the following are valid options for FortiMail deployment?

Accepted Answer

Gateway mode. FortiMail supports Gateway, Transparent, and Server modes.

Answer

Proxy mode

Answer

NAT mode

Answer

Endpoint mode

Question 3

Which THREE actions can be taken by a DLP filter when a match is found?

Accepted Answer

Encrypt. DLP filters can be configured to log, quarantine, or block/reject messages based on the rule.

Answer

Modify sender

Answer

Route to another interface

Question 4

An administrator wants to ensure that all outgoing emails are archived to a secondary server. Where is this configured?

Accepted Answer

Archiving policy. Archiving policies are configured to define the source and destination for email archival.

Answer

Access Control rule

Answer

AntiSpam profile

Answer

Routing policy

Question 5

What is the main advantage of using the FortiMail 'Quarantine' portal for end-users?

Accepted Answer

It allows users to manage their own quarantined emails.. The portal empowers users to manage their own spam, reducing the load on IT administrators.

Answer

It hides spam messages.

Answer

It deletes all mail automatically.

Answer

It provides full system logs.

Question 6

Which THREE of the following are true regarding 'Revision History'?

Accepted Answer

It stores snapshots of device configurations.. Revision history creates snapshots of configs, allows comparing versions, and enables restoration.

Answer

It restricts administrative access.

Answer

It automatically deletes old logs.

Question 7

When managing policy packages, what does the 'Policy Package' clone feature do?

Accepted Answer

It creates a duplicate of the package.. Cloning creates an exact copy of a policy package, which is useful for creating variations for different deployments.

Answer

It merges two packages into one.

Answer

It resets the package to factory defaults.

Answer

It deletes the original package.

Question 8

Which tab in the FortiManager GUI is primarily used for managing firewall policies and objects?

Accepted Answer

Policy & Objects. The Policy & Objects tab is the central location for managing firewall rules, addresses, services, and schedules.

Answer

FortiView

Answer

Device Manager

Answer

System Settings

Question 9

Which protocol does FortiManager use to communicate with managed FortiGate devices?

Accepted Answer

FMG protocol.. FortiManager uses the FortiManager protocol (FMG protocol) which typically operates over TCP port 541.

Answer

SSH.

Answer

SNMP.

Answer

HTTP.

Question 10

When using the Workflow mode for policy management, what happens immediately after a policy change request is submitted?

Accepted Answer

The policy is locked and sent to the approval queue.. In Workflow mode, the request is placed in a 'Pending' state and must be approved by an authorized administrator before it can be installed.

Answer

The policy is pushed to the device automatically.

Answer

The device immediately reboots.

Answer

The policy is applied to the 'Staging' ADOM.

Question 11

When using 'Log Forwarding', can you filter the logs before they are forwarded?

Accepted Answer

Yes, using log filters. Yes, you can apply filters to log forwarding profiles to only send specific traffic types.

Answer

Only for FortiAnalyzer destinations

Answer

No, all logs are forwarded

Answer

Only for Syslog

Question 12

What is the primary purpose of using 'Provisioning Templates' in FortiManager?

Accepted Answer

To standardize system settings like NTP, DNS, and logging on multiple devices.. Provisioning templates allow administrators to standardize global settings across multiple FortiGate devices automatically.

Answer

To manage FortiClient endpoints.

Answer

To create firewall policies across all devices.

Answer

To generate performance reports.

Question 13

Which THREE of the following are components of the 'Policy Package'?

Accepted Answer

Firewall policies.. Policy packages contain firewall policies, address objects, and services used by those rules.

Answer

Hardware interface settings.

Answer

Firmware images.

Question 14

Which method is the most efficient way to apply a specific set of CLI commands to 50 FortiGate devices simultaneously in FortiManager?

Accepted Answer

Using the Script Manager.. The Script Manager allows admins to define a set of commands and run them on multiple devices concurrently.

Answer

Updating the firmware.

Answer

Manual CLI access to each device.

Answer

Modifying the Provisioning Template.

Question 15

What is the function of the 'Check for Updates' feature in FortiManager's FortiGuard settings?

Accepted Answer

To update antivirus, IPS, and application control signatures.. This feature checks the FortiGuard servers for updates to services like IPS, AV, and Application Control databases.

Answer

To check for new FortiGate hardware models.

Answer

To verify the license key.

Answer

To update the FortiManager firmware.

Question 16

Which THREE of the following are benefits of using ADOMs in FortiManager?

Accepted Answer

Ability to manage different firmware versions.. ADOMs provide administrative separation, allow for different firmware version management, and improve scalability.

Answer

Increased throughput for traffic.

Answer

Automatic hardware upgrades.

Question 17

What is the primary benefit of using a 'Device Group' in FortiManager?

Accepted Answer

They allow for easier organization and bulk actions on devices.. Device groups help organize devices for easier reporting and management tasks.

Answer

They are required for ADOM creation.

Answer

They provide better firewall performance.

Answer

They enable automatic failover.

Question 18

You notice that the FortiMail system time is incorrect, causing issues with SSL/TLS certificate validation. How do you correct this?

Accepted Answer

Configure an NTP server.. System time is managed through NTP configuration to ensure synchronization with a reliable time server.

Answer

Disable SSL certificate validation.

Answer

Restart the system clock service.

Answer

Manually update via the CLI.

Question 19

Which THREE steps are required to implement a new firewall policy using the FortiManager workflow mode?

Accepted Answer

Submit the request for approval.. Workflow mode requires a sequential process of creating, reviewing, and approving changes.

Answer

Delete the original policy.

Answer

Reboot the FortiGate.

Question 20

Which THREE of the following are features of the FortiManager 'Global Settings'?

Accepted Answer

Admin user management.. Global settings cover administrative access, system time, and service parameters.

Answer

Per-device policy package management.

Answer

Automated firmware deployment.