FORTINET-NSE56 Practice Test 4 — 10 Questions

Question 1

Which TWO types of logs can be generated by FortiMail?

Accepted Answer

AntiSpam logs. FortiMail generates various logs including Event and Spam logs.

Answer

User profile logs

Answer

Packet capture files

Answer

Hardware logs

Question 2

You are performing a packet capture on FortiMail. Which command-line tool is most effective for viewing SMTP traffic in real-time?

Accepted Answer

diagnose sniffer packet any 'port 25' 4. The 'diagnose sniffer packet' command is the standard way to capture and view traffic in real-time on Fortinet appliances.

Answer

show log traffic

Answer

execute telnet

Answer

get system status

Question 3

Which THREE items are included in a standard email header for DMARC validation?

Accepted Answer

DKIM signature. DMARC checks the From domain, SPF/DKIM alignment, and policy flags.

Answer

Attachment name

Answer

User password

Question 4

How can you ensure that only encrypted traffic is allowed for webmail access?

Accepted Answer

Enable HTTPS and redirect HTTP to HTTPS.. Configuring the system to only listen on HTTPS (443) and redirecting HTTP (80) requests enforces encryption.

Answer

Use a VPN for all traffic.

Answer

Set the port to 25.

Answer

Disable the Webmail service.

Question 5

What is the purpose of the 'License' section in the FortiMail menu?

Accepted Answer

To view and manage product licenses.. The license section allows you to manage and verify the status of your product licenses.

Answer

To check for updates.

Answer

To reboot the system.

Answer

To view logs.

Question 6

Which TWO of the following are allowed in an ADOM?

Accepted Answer

Multiple policy packages.. ADOMs can contain multiple devices and multiple policy packages.

Answer

Multiple administrative domains.

Answer

Multiple FortiManager units.

Answer

Multiple firmware versions per device.

Question 7

What is the result of 'Retrieve Config' when the FortiGate has local changes not yet in the FortiManager database?

Accepted Answer

The FortiManager database is updated with the device configuration.. Retrieving the config pulls those changes into the FortiManager, bringing the database into sync.

Answer

All policies are deleted.

Answer

The FortiGate resets to factory settings.

Answer

The FortiGate goes offline.

Question 8

You need to create a custom report that includes historical traffic data spanning six months. What must be configured to ensure the report generation does not time out?

Accepted Answer

Report cache. Enabling 'Report Data Masking' or using 'Report Cache' improves performance for long-duration reports.

Answer

FortiView data archiving

Answer

Log archive compression

Answer

ADOM mode change

Question 9

Which feature in the Device Manager allows you to push configuration changes to multiple FortiGate devices at once?

Accepted Answer

Provisioning Templates. 'Provisioning Templates' allow centralized configuration management.

Answer

Log Forwarding

Answer

Report scheduling

Answer

ADOM grouping

Question 10

Which TWO actions can be triggered by a FortiSoC Playbook?

Accepted Answer

Sending an email notification. Playbooks can perform actions like notifying an admin via email or updating a security object on a FortiGate.

Answer

Deleting the ADOM

Answer

Changing system time

Answer

Rebooting the FortiAnalyzer