FORTINET-NSE56 Practice Test 6 — 10 Questions

Question 1

Which feature in the Device Manager allows you to push configuration changes to multiple FortiGate devices at once?

Accepted Answer

Provisioning Templates. Provisioning Templates in FortiManager's Device Manager let you define reusable configuration templates (e.g., system settings, interface configs, firewall objects) and apply them to multiple FortiGate devices or device groups at once. This is the intended feature for bulk-pushing configuration changes across many devices.

Answer

Log Forwarding

Answer

Report scheduling

Answer

ADOM grouping

Question 2

Which TWO methods can be used to authenticate users for access to the FortiMail quarantine portal?

Accepted Answer

LDAP. Option B (LDAP) is correct because FortiMail can query an external LDAP directory (for example Active Directory or OpenLDAP) to authenticate users who log in to the quarantine portal, allowing centralized credential verification. Option E (Local user database) is correct because FortiMail also supports authenticating quarantine portal users against its own locally defined user accounts when no external server is used. Options A (Syslog), C (SNMP), and D (ICMP) are incorrect because they are logging, monitoring/management, and network diagnostic protocols respectively, and none of them provide user authentication for portal access.

Answer

Syslog

Answer

SNMP

Answer

ICMP

Question 3

Which of these is a benefit of 'Transparent' mode?

Accepted Answer

It requires no changes to mail server settings.. In Transparent mode, the FortiMail unit is inserted into the existing network path without requiring any changes to the IP addresses or configurations of the mail servers behind it. It acts as a Layer 2 bridge, so the mail server's default gateway remains the same and no MX record or relay settings need to be modified. This makes deployment simple and non-disruptive, which is the primary benefit of Transparent mode.

Answer

It is faster than Gateway mode.

Answer

It supports only one domain.

Answer

It hides the mail server IP.

Question 4

How can you view the 'Total' number of policies in a specific policy package?

Accepted Answer

In the Policy & Objects tab list view.. The total number of policies in a policy package is displayed in the Policy & Objects tab list view, where FortiManager shows the policy list along with a count. This is the standard GUI location for reviewing and counting policies within a package.

Answer

In the Device Manager.

Answer

Using a CLI script.

Answer

By going to the Dashboard.

Question 5

Which dashboard provides a 'Threat Map'?

Accepted Answer

FortiView. FortiView is the FortiGate dashboard module that includes the Threat Map, a geographic visualization of attacks and threats detected by the device. It aggregates log data into interactive widgets showing top threats, sources, and destinations on a world map. The Threat Map is accessed from FortiView, not from the Report, Device Manager, or Log View modules.

Answer

Report module

Answer

Device Manager

Answer

Log View

Question 6

When using the FortiManager 'Install Wizard' to push configuration changes, what happens if the policy package being pushed contains objects that do not exist on the target FortiGate?

Accepted Answer

The installation fails during the validation phase.. When the FortiManager Install Wizard pushes a policy package, it performs a validation phase that checks whether all referenced objects exist on the target FortiGate. If any object is missing, the installation fails during validation rather than proceeding, because FortiManager will not push a policy that references undefined objects. This prevents broken or incomplete configurations from being deployed.

Answer

The installation proceeds and ignores the missing objects.

Answer

The FortiGate automatically creates the missing objects using default settings.

Answer

The objects are pushed as CLI commands only.

Question 7

What is the purpose of 'Report Templates'?

Accepted Answer

To provide consistent report formats. Report Templates in FortiAnalyzer/FortiManager define the layout, sections, charts, and formatting used when generating reports, so that recurring reports share a uniform structure and appearance. They are reusable blueprints that administrators attach to report schedules, ensuring every generated PDF/HTML report follows the same corporate or compliance format. This is why the correct answer is 'to provide consistent report formats' rather than any operational function like firmware, filtering, or alerting.

Answer

To update firmware

Answer

To filter logs

Answer

To configure alerts

Question 8

In Gateway mode, what is the default behavior when FortiMail receives an email for an unknown recipient?

Accepted Answer

Reject the email at the SMTP level.. In Gateway mode, FortiMail acts as an SMTP gateway and by default rejects email for unknown recipients at the SMTP level with a 550 error. This prevents backscatter and reduces load from spam directed at non-existent addresses. The behavior is controlled by the 'unknown recipient' policy, which defaults to reject.

Answer

Accept the email and store it in a general box.

Answer

Forward the email to the administrator.

Answer

Queue the email for 24 hours.

Question 9

Which dashboard widget provides a high-level summary of system resource usage?

Accepted Answer

System Information. The System Information dashboard widget in FortiGate displays a high-level summary of system resource usage, including CPU utilization, memory usage, disk usage, and session counts. It provides administrators with an at-a-glance view of the device's health and performance metrics directly on the dashboard.

Answer

Report Settings

Answer

Log View

Answer

FortiView Threats

Question 10

A user authenticated via FortiAuthenticator is unable to access a resource protected by a FortiGate policy. The policy uses the user's LDAP group. What is the most likely cause?

Accepted Answer

The FortiGate remote group is not defined for the LDAP server. For a FortiGate policy to match an LDAP group, the group must first be imported/defined as a remote group under User & Authentication > LDAP Servers on the FortiGate. If the remote group is not defined, the policy cannot reference it and the user's group membership is never evaluated, causing access denial even though authentication succeeded.

Answer

The LDAP user account is locked

Answer

FortiAuthenticator is in maintenance mode

Answer

The user is using the wrong password