FORTINET-NSE56 Practice Test 5 — 25 Questions

Question 1

How can you view the 'Total' number of policies in a specific policy package?

Accepted Answer

In the Policy & Objects tab list view.. The status bar at the bottom of the policy list displays the total number of policies in the currently selected package.

Answer

In the Device Manager.

Answer

Using a CLI script.

Answer

By going to the Dashboard.

Question 2

Which setting in the 'System Settings' is used to define the administrator's password policy?

Accepted Answer

Administrator settings.. Admin password policies are managed within the Administrator settings section of System Settings.

Answer

Device Manager.

Answer

Policy & Objects.

Answer

FortiGuard.

Question 3

Which component in FortiManager is responsible for managing the logical grouping of multiple FortiGate devices that share the same policy package?

Accepted Answer

Policy Package. Folders in the Device Manager are used to organize devices, but 'Policy Packages' are the logical unit used to group devices for policy application.

Answer

Firmware Template

Answer

ADOM

Answer

Device Group

Question 4

Which of the following is a mandatory step when creating a new ADOM in FortiManager?

Accepted Answer

Selecting a firmware version.. An ADOM must have a version selected that matches the firmware version of the FortiGate devices it will manage.

Answer

Assigning an IP address.

Answer

Defining a policy package.

Answer

Configuring SNMP.

Question 5

An administrator is using the 'Policy Lookup' tool in FortiManager. What does this tool provide?

Accepted Answer

It identifies which policy matches a specific traffic scenario.. Policy Lookup allows admins to test traffic flow by entering source, destination, and service to see which policy would match.

Answer

It shows which user is logged in.

Answer

It modifies traffic parameters.

Answer

It scans for unused objects.

Question 6

What is the purpose of the 'Add Device' wizard?

Accepted Answer

To register a new device to be managed by FortiManager.. The wizard simplifies the process of registering a new FortiGate by prompting for IP, credentials, and ADOM assignment.

Answer

To update the FortiGate firmware.

Answer

To migrate policies.

Answer

To configure VPN tunnels.

Question 7

An administrator needs to enforce DMARC 'reject' policy for incoming mail. Where is this enforced in FortiMail?

Accepted Answer

AntiSpam profile. DMARC settings are managed within the 'AntiSpam' profile under 'Domain settings' or specific DMARC control configurations.

Answer

Access Control rules

Answer

Antivirus policy

Answer

Routing policy

Question 8

Which THREE actions can be performed on a policy package within the Policy & Objects tab?

Accepted Answer

Clone. Policy packages support cloning, deleting, and locking as part of their management lifecycle.

Answer

Factory Reset

Answer

Firmware Upgrade

Question 9

Which TWO of the following are valid methods to back up a FortiManager configuration?

Accepted Answer

Manual backup via the System Settings GUI.. Backups can be performed manually via the GUI or scheduled as a system task.

Answer

Copying files via USB drive.

Answer

Using the 'Backup' button on the FortiGate.

Answer

Automatic cloud sync to FortiCloud.

Question 10

Which TWO of the following are true about 'Scripts' in FortiManager?

Accepted Answer

They can be scheduled to run at specific times.. Scripts can be executed on devices and can be stored for reusability.

Answer

They can only be run once.

Answer

They automatically convert to policies.

Answer

They require a separate license.

Question 11

You are troubleshooting a sync issue where a device shows 'Modified' status in the Device Manager. What is the most likely cause?

Accepted Answer

The configuration on the FortiGate was changed locally.. A 'Modified' status indicates the configuration on the FortiGate has diverged from the configuration stored in the FortiManager database.

Answer

The FortiManager license has expired.

Answer

The FortiManager firmware is outdated.

Answer

The policy package was deleted.

Question 12

What is the purpose of 'Revision History' when it comes to policy packages?

Accepted Answer

To store and revert changes made to policies.. It allows administrators to maintain versions of policy packages, facilitating easy rollbacks if a change causes issues.

Answer

To synchronize objects across ADOMs.

Answer

To generate audit reports.

Answer

To archive logs.

Question 13

Which TWO of the following are valid ways to monitor the status of managed FortiGate devices in the Device Manager?

Accepted Answer

ADOM-level dashboard. Device manager provides real-time connection status and sync status indicators.

Answer

License expiry alert

Answer

Global policy report

Answer

Firmware log

Question 14

Which THREE settings are required for successful DKIM signing on outgoing mail?

Accepted Answer

Domain definition. DKIM signing requires a key, a selector, and the configuration of the signing domain.

Answer

User password

Answer

SMTP port 25 configuration

Question 15

What is the primary role of the 'Administrator' profile?

Accepted Answer

To manage administrative access and permissions.. The admin profile manages access rights and permissions for different user accounts managing the FortiMail.

Answer

To store quarantined emails.

Answer

To filter email content.

Answer

To configure mail routing.

Question 16

Which GUI menu is primarily used for monitoring real-time activity?

Accepted Answer

Monitor.. The Dashboard and Monitor sections show live traffic and status indicators.

Answer

Profile.

Answer

Policy.

Answer

System settings.

Question 17

What is the primary function of the FortiMail 'Quarantine' feature?

Accepted Answer

To hold emails identified as spam or viruses for review.. The quarantine stores suspicious emails that have been flagged by filters, allowing administrators or users to review them rather than automatically deleting them.

Answer

To provide long-term email archiving.

Answer

To compress outgoing attachments.

Answer

To bypass SMTP authentication.

Question 18

Which TWO features in FortiMail help prevent email spoofing?

Accepted Answer

DKIM. SPF and DKIM are the primary mechanisms for verifying sender identity and preventing spoofing.

Answer

Syslog

Answer

Antivirus

Answer

POP3

Question 19

If an administrator needs to ensure that a specific set of CLI commands is always applied during the deployment of a new device, which tool should be used?

Accepted Answer

CLI Template. Provisioning templates allow administrators to define 'CLI Templates' which can be associated with devices upon registration or deployment.

Answer

Global Database

Answer

Policy Package

Answer

Import Wizard

Question 20

An administrator needs to quickly distribute a CLI command to fifty managed FortiGate devices. Which feature should they use to automate this task efficiently?

Accepted Answer

Scripts. Scripts in FortiManager allow administrators to execute CLI commands across multiple devices or ADOMs simultaneously.

Answer

Device Groups

Answer

Policy Packages

Answer

Provisioning Templates