FORTINET-NSE56 Practice Test 3 — 10 Questions

Question 1

A user reports that they cannot see any data in 'FortiView' for a specific device. What is the most likely cause?

Accepted Answer

The ADOM selection is incorrect. If logs are not being indexed or if the device is not registered, FortiView cannot display data. Also, ensure the ADOM is selected correctly.

Answer

The FortiGate is powered off

Answer

The report is still running

Answer

The FortiAnalyzer is too slow

Question 2

Which administrative account type has full access to all ADOMs and system settings?

Accepted Answer

Super_User. The 'Super_User' account has unrestricted access.

Answer

Report Admin

Answer

Log Admin

Answer

Restricted Admin

Question 3

Which THREE elements are part of the Event Handler configuration?

Accepted Answer

Alert action (email/SNMP). Event handlers are configured with a filter, a trigger/threshold, and the resulting alert method.

Answer

Report output profile

Answer

Firmware update schedule

Question 4

Which object type should you use in FortiManager to ensure a consistent naming convention for address objects across multiple ADOMs?

Accepted Answer

Global objects.. Global objects allow you to define objects once and push them to multiple ADOMs for consistency.

Answer

Provisioning templates.

Answer

Local ADOM objects.

Answer

CLI templates.

Question 5

When using the FortiManager 'Install Wizard' to push configuration changes, what happens if the policy package being pushed contains objects that do not exist on the target FortiGate?

Accepted Answer

The installation fails during the validation phase.. FortiManager validates the configuration before pushing and will fail the installation if referenced objects are missing.

Answer

The installation proceeds and ignores the missing objects.

Answer

The FortiGate automatically creates the missing objects using default settings.

Answer

The objects are pushed as CLI commands only.

Question 6

Which TWO methods can be used to authenticate administrative users on FortiAnalyzer?

Accepted Answer

LDAP. FortiAnalyzer supports both local authentication and external directory services (LDAP/RADIUS).

Answer

FTP

Answer

DHCP

Answer

Syslog

Question 7

Which TWO methods can be used to back up FortiAnalyzer configuration?

Accepted Answer

Scheduled backup to FTP/SCP. Configurations can be backed up manually or scheduled for automated export to a remote server.

Answer

FortiView snapshots

Answer

Log archiving

Answer

Device provisioning

Question 8

What is the effect of changing an ADOM mode from 'Advanced' to 'Normal'?

Accepted Answer

It simplifies ADOM management. Normal mode simplifies the ADOM by disabling features like per-device log management, but it may require removing devices.

Answer

It forces all devices to reboot

Answer

It increases storage capacity

Answer

It enables full FortiSoC capabilities

Question 9

Which dashboard shows the health status of all registered devices?

Accepted Answer

Device Manager. The Device Manager dashboard provides a quick view of the status of all registered devices.

Answer

FortiView

Answer

Reports

Answer

Event Handler

Question 10

FortiAuthenticator is acting as a SAML Service Provider for a FortiGate. Users are failing to authenticate. Where should you check the logs to determine if the SAML assertion was received and parsed correctly?

Accepted Answer

FortiAuthenticator SAML log. The SAML debug logs on the FortiAuthenticator provide detail on the assertion exchange and attribute mapping.

Answer

FortiAnalyzer Traffic Log

Answer

FortiGate Event Log

Answer

RADIUS Authentication Log