FORTINET-NSE56 Practice Test 4 — 10 Questions

Question 1

An administrator wants to ensure that a specific policy is always included in all policy packages within an ADOM. What feature should be used?

Accepted Answer

Global Policy.. Global Policies in FortiManager are objects created at the ADOM level that are automatically inherited by every policy package within that ADOM. This ensures a consistent baseline policy (for example, a deny-all or management-access rule) is always present regardless of which package an administrator installs. Because they are enforced at the ADOM scope, they cannot be accidentally omitted from a package.

Answer

Script.

Answer

Provisioning Template.

Answer

Standard Policy.

Question 2

If an administrator wants to perform a 'Config Check' to see what changes will be deployed during an installation, which option should they select in the 'Install Wizard'?

Accepted Answer

Install Preview. The 'Install Preview' option in the FortiManager Install Wizard generates a diff showing exactly what configuration changes will be pushed to the target device before the install actually runs. This lets administrators review the delta and catch unintended changes before deployment.

Answer

Policy Check

Answer

Install Config

Answer

Sync Device

Question 3

You are configuring a FortiWeb WAF policy for a web application. You need to ensure that the WAF blocks requests that contain SQL injection patterns. Which feature should you enable in the WAF profile?

Accepted Answer

Enable SQL Injection in the WAF profile. FortiWeb's WAF profile includes a specific signature set for SQL injection (SQLi) detection, which matches patterns like ' OR 1=1, UNION SELECT, and other database query manipulations. Enabling SQL Injection in the WAF profile activates these signatures and applies them to incoming requests. This directly addresses the requirement to block SQL injection patterns. Other protections target different attack types and would not cover SQLi.

Answer

Enable Buffer Overflow protection

Answer

Enable HTTP Protocol Validation

Answer

Enable Cross-site Scripting protection

Question 4

Which component of the FortiAuthenticator is responsible for the self-service portal where users can manage their own two-factor authentication tokens?

Accepted Answer

User Portal. The User Portal component of FortiAuthenticator is responsible for the self-service portal where users can manage their own two-factor authentication tokens. It provides a web interface for users to enroll tokens, reset passwords, and manage their profiles. This offloads administrative tasks and empowers users.

Answer

AD Connector

Answer

Admin GUI

Answer

RADIUS Server

Question 5

A FortiADC is load balancing an HTTPS application. You need to offload SSL processing to the ADC to reduce server load. What is the correct object to configure for this?

Accepted Answer

Client SSL Profile. SSL offloading on FortiADC is configured via the Client SSL Profile, which holds the server certificate, private key, and TLS parameters used to terminate client-side HTTPS connections on the ADC. Once terminated, the ADC can inspect and load-balance the decrypted traffic before re-encrypting to backends if needed. This is the object that performs the offload.

Answer

Content Routing Policy

Answer

Server SSL Profile

Answer

Layer 7 Persistence Rule

Question 6

Which THREE are key benefits of using FortiWeb to protect web applications?

Accepted Answer

Protection against SQL Injection. Option C is correct because FortiWeb is a web application firewall (WAF) that inspects HTTP/HTTPS traffic and uses signatures and anomaly detection to block SQL Injection attacks against web applications. Option D is correct because FortiWeb can terminate TLS/SSL sessions, performing SSL offloading so backend web servers are freed from encryption/decryption overhead while FortiWeb inspects the decrypted traffic. Option E is correct because FortiWeb provides logging, reporting, and compliance-oriented dashboards that help organizations demonstrate adherence to regulations such as PCI DSS. Option A is not a FortiWeb function, since replacing an ISP is a connectivity/business decision unrelated to application security. Option B is also unrelated, as physical security of the server room is handled by facility controls, not by a WAF.

Answer

Replacing the ISP

Answer

Physical security of the server room

Question 7

What is the consequence of deleting a device from an ADOM in FortiManager?

Accepted Answer

The FortiGate is no longer managed by that ADOM.. Deleting a device from an ADOM in FortiManager only removes the management association between that FortiGate and the ADOM. The FortiGate itself keeps running with its current configuration and continues passing traffic; it simply is no longer managed within that ADOM.

Answer

The FortiGate is automatically rebooted.

Answer

The FortiGate will stop passing traffic.

Answer

The FortiGate configuration is wiped.

Question 8

Which TWO features in FortiMail help prevent email spoofing?

Accepted Answer

DKIM. DKIM (D) is correct because it cryptographically signs outbound messages with a private key and lets receiving servers verify the signature against a published public key in DNS, so a spoofed sender cannot produce a valid signature and the message fails authentication. SPF (E) is correct because it publishes a DNS TXT record listing the authorized sending hosts for a domain, allowing the receiving FortiMail to check the envelope sender's connecting IP and reject or flag mail from unauthorized servers. Both are standard email authentication mechanisms FortiMail uses in its antispam and sender-verification policies to detect forged sender addresses. Syslog (A) is only a logging/event transport and does not authenticate senders, Antivirus (B) scans message content for malware rather than verifying sender identity, and POP3 (C) is a mailbox retrieval protocol with no role in preventing spoofing.

Answer

Syslog

Answer

Antivirus

Answer

POP3

Question 9

An administrator needs to identify which application is consuming the most bandwidth on the network. Which feature in FortiView provides the most efficient visual representation for this task?

Accepted Answer

FortiView Applications. FortiView Applications aggregates traffic by application identity, showing which applications consume the most bandwidth in a visual, ranked format. This directly answers the administrator's need to identify the top bandwidth consumer efficiently. The other FortiView views focus on sources, destinations, or logs rather than application-level bandwidth breakdown.

Answer

Log View

Answer

FortiView Sources

Answer

FortiView Destinations

Answer

Reports

Question 10

When modifying a policy package, what does 'Lock' indicate?

Accepted Answer

The package cannot be edited by other admins.. In FortiManager, locking a policy package indicates that an administrator has taken exclusive edit control over it. While locked, other administrators cannot modify the package, preventing concurrent edits and configuration conflicts. The lock must be released before others can edit or before the package can be installed (in some workflows).

Answer

The package is deleted.

Answer

The package is ready to be pushed.

Answer

The package is corrupted.