FORTINET-NSE56 Practice Test 4 — 25 Questions

Question 1

When defining an Install Workflow, which THREE settings or options can be configured to manage the deployment process?

Accepted Answer

Set Notification Email. Workflow settings include approval requirements, notifications, and task locks.

Answer

Change Firmware automatically

Answer

Delete Policy after Install

Question 2

Which TWO types of report formats can be generated by FortiAnalyzer?

Accepted Answer

CSV. FortiAnalyzer supports generating reports in PDF, HTML, and CSV formats.

Answer

EXE

Answer

ISO

Answer

MP4

Question 3

Which TWO protocols are commonly used for external communication with FortiAnalyzer?

Accepted Answer

SSH. HTTPS is used for management and SSH for CLI, while Syslog/OFTP are for log traffic.

Answer

Telnet

Answer

POP3

Answer

HTTP

Question 4

What is the primary benefit of deploying FortiMail in a cluster?

Accepted Answer

To provide high availability and fault tolerance.. Clustering provides high availability and load balancing to ensure mail service continuity.

Answer

To bypass the need for a mail server.

Answer

To reduce the cost of licensing.

Answer

To increase the number of physical ports.

Question 5

An administrator wants to perform a 'Re-install Policy' on a subset of devices without changing their current configuration settings. Which install option should be selected?

Accepted Answer

Re-install Policy. When reinstalling, selecting 'Re-install Policy' only updates the firewall policies and objects, leaving existing device settings intact.

Answer

Install Config and Policy

Answer

Factory Reset and Install

Answer

Install Device Settings

Answer

Re-install Objects Only

Question 6

What is the purpose of 'Policy Package' import?

Accepted Answer

To add existing FortiGate policies to the FortiManager.. Importing allows you to pull existing policies from a device into a package in FortiManager.

Answer

To backup policies.

Answer

To share policies between ADOMs.

Answer

To push policies to a new device.

Question 7

Which THREE types of dashboards can be viewed in FortiAnalyzer?

Accepted Answer

Custom widgets/dashboards. FortiAnalyzer includes system dashboards, FortiView, and user-defined custom dashboards.

Answer

Firmware update dashboard

Answer

Report scheduling dashboard

Question 8

You are troubleshooting a failed policy installation. Where can you view the detailed diff between the FortiManager policy database and the actual FortiGate running configuration?

Accepted Answer

Policy & Objects > Installation Preview.. The 'Preview' feature in the installation wizard provides a side-by-side diff of the changes to be pushed.

Answer

Object Usage.

Answer

FortiView.

Answer

Device Manager > Revision History.

Answer

System Settings > Task Monitor.

Question 9

Which TWO of the following are valid states for a device in FortiManager?

Accepted Answer

Synchronized.. Devices can be synchronized, modified, or in a state requiring retrieval.

Answer

Upgrading.

Answer

Archived.

Answer

Formatting.

Question 10

Which TWO tasks are part of the 'Log Management' phase on FortiAnalyzer?

Accepted Answer

Log ingestion and indexing. Log management includes the ingestion/storage of logs and the maintenance (archiving/deletion) of those logs.

Answer

Defining report schedules

Answer

Configuring playbook triggers

Answer

Pushing firmware to FGT

Question 11

What is the primary difference between a Gateway and a Server mode deployment?

Accepted Answer

Gateway mode relays to backend servers.. Gateway mode acts as an MTA for existing servers, while Server mode acts as the mail server itself.

Answer

Gateway mode provides storage.

Answer

Gateway mode supports LDAP.

Answer

Gateway mode ignores AntiSpam.

Question 12

What happens when you change an ADOM's version?

Accepted Answer

The ADOM supports the new firmware version features.. Changing the ADOM version updates the supported firmware features and requires existing devices to match the new version.

Answer

All logs are cleared.

Answer

All device policies are automatically converted.

Answer

The FortiManager reboots.

Question 13

Which TWO actions can be taken when an event handler triggers?

Accepted Answer

Log the event. Event handlers can send email notifications and generate log entries or trigger webhooks for further processing.

Answer

Delete the logs

Answer

Auto-patch the FGT

Answer

Reboot the device

Question 14

Which TWO conditions must be met to successfully use an 'Install Config' wizard for device-level settings?

Accepted Answer

The configuration database must be synchronized.. The device must be registered and the database must be synchronized.

Answer

The device must be running the latest firmware.

Answer

All policies must be deleted.

Answer

The device must be in 'backup' mode.

Question 15

A FortiManager administrator needs to migrate an existing local FortiGate policy into a shared policy package. Which process must be followed?

Accepted Answer

Use the Policy Import tool to move to Global ADOM. To transition a local policy to a shared one, the admin must copy or move the policy to the global ADOM-level policy package.

Answer

Manually re-import the config

Answer

Disable policy management

Answer

Delete local policy and recreate

Question 16

You have imported a new FortiGate into FortiManager. Which operation must you perform to synchronize the existing policy package with the new device?

Accepted Answer

Perform an Import Policy operation.. Importing creates the configuration, but you must run 'Import Policy' to move the firewall policies into the ADOM database.

Answer

Upgrade the firmware.

Answer

Re-install the device settings.

Answer

Run a script to update the policy database.

Question 17

Which of the following is a valid method for importing a FortiGate configuration into FortiManager?

Accepted Answer

Upload the backup file via the 'Import' GUI option in the device list.. Direct connection from the FortiManager to the FortiGate via the Add Device wizard is the primary import method.

Answer

By modifying the FortiManager's config file manually.

Answer

Using a USB drive plugged into the FortiManager.

Answer

Emailing the configuration to the FortiManager.

Question 18

Which TWO of the following are common reasons for a policy installation failure in FortiManager?

Accepted Answer

Referenced objects missing on the target device.. Conflicts in object references or synchronization issues are frequent causes of failure.

Answer

Device firmware is too new.

Answer

Too many policies in the package.

Answer

The administrator password is incorrect.

Question 19

A FortiManager administrator attempted to install a policy package, but the installation failed due to an object conflict. Where can the administrator view the detailed reason for the installation failure?

Accepted Answer

Policy & Objects > Task Monitor. The Task Monitor provides detailed logs and error messages for installation tasks, including specific object conflicts.

Answer

Device Manager > Revision History

Answer

System Settings > Event Log

Answer

Policy & Objects > Installation Targets

Question 20

A FortiADC is reporting 'Server Busy' for a pool member. What does this indicate?

Accepted Answer

The server has reached its max connection limit. The 'Server Busy' status usually means the server has reached its connection limit as defined in the server object.

Answer

The server is rejected by the health check

Answer

The server is down

Answer

The ADC is experiencing high CPU