FORTINET-NSE56 Practice Test 7 — 10 Questions

Question 1

Where do you configure the email server settings for FortiManager alert notifications?

Accepted Answer

System Settings.. Email server settings for FortiManager alert notifications (SMTP server, port, authentication, sender address) are configured under System Settings > Alert Email, which is the centralized location for notification delivery configuration.

Answer

FortiView.

Answer

Policy & Objects.

Answer

Device Manager.

Question 2

How are Revision Histories primarily used in FortiManager when a device configuration has been modified locally on the FortiGate?

Accepted Answer

To perform a diff between the current device configuration and stored revisions.. Revision History in FortiManager stores snapshots of device configuration each time a change is made, whether pushed from FortiManager or detected from the FortiGate. When a device has been modified locally, the administrator can use Revision History to run a diff between the current running configuration and any stored revision, revealing exactly what changed out-of-band. This is the primary diagnostic use of the feature.

Answer

To automatically roll back local changes without user input.

Answer

To create new ADOMs.

Answer

To schedule daily firmware upgrades.

Question 3

You are creating a new policy package. You need to ensure that shared objects from the Global ADOM are available. What is the correct workflow?

Accepted Answer

Assign the Global ADOM to the target ADOM.. To make shared objects from the Global ADOM available in a policy package, you must assign the Global ADOM to the target ADOM. This creates a parent-child relationship where the target ADOM inherits global objects, which can then be referenced in local policies. The other options involve manual export/import or wizard-based syncing, which are not the correct workflow for global object availability.

Answer

Use the 'Install Wizard' to sync global objects.

Answer

Export objects from the Global ADOM and re-import them.

Answer

Import the objects directly into the local policy package.

Question 4

Which protocol is used for communication between the FortiMail and a remote LDAP server for user authentication?

Accepted Answer

LDAP. LDAP (Lightweight Directory Access Protocol) is the protocol used to query directory services such as Active Directory or OpenLDAP for user authentication and attribute lookup. FortiMail connects to a remote LDAP server over TCP port 389 (or 636 for LDAPS) to validate recipient addresses and authenticate users. The other protocols listed serve entirely different purposes in the mail flow.

Answer

SMTP

Answer

POP3

Answer

SNMP

Question 5

When using 'Log Forwarding', can you filter the logs before they are forwarded?

Accepted Answer

Yes, using log filters. FortiGate log forwarding supports log filters that allow administrators to selectively forward only specific log types, severity levels, or events to external destinations. This filtering is configured per forwarding destination (e.g., syslog, FortiAnalyzer, CEF) and reduces noise and bandwidth by excluding irrelevant logs. Therefore, yes, logs can be filtered before forwarding using log filters.

Answer

Only for FortiAnalyzer destinations

Answer

No, all logs are forwarded

Answer

Only for Syslog

Question 6

Where do you go to view the real-time logs currently being received by the FortiAnalyzer?

Accepted Answer

Log View. Log View is the FortiAnalyzer module that displays logs as they are received, with real-time refresh and filtering by ADOM, device, log type, and time. It is the direct equivalent of a live log console and is where administrators confirm that logs are actually arriving from a FortiGate. The other modules serve analytics, management, or reporting purposes.

Answer

Report module

Answer

FortiSoC module

Answer

Device Manager

Question 7

Which feature allows FortiMail to perform automatic cleanup of old messages in the quarantine?

Accepted Answer

Quarantine maintenance. FortiMail's Quarantine maintenance feature (configured under System > Maintenance or via the quarantine settings) automates the cleanup of old messages in the quarantine by defining retention periods and scheduled deletion. It is the built-in mechanism specifically designed to prevent quarantine storage from growing unbounded. Administrators configure it to purge messages older than a specified age on a recurring schedule.

Answer

Policy-based expiration

Answer

Daily report schedule

Answer

Storage quota limit

Answer

Email Archiving

Question 8

Which of the following is a mandatory step when creating a new ADOM in FortiManager?

Accepted Answer

Selecting a firmware version.. When creating a new Administrative Domain (ADOM) in FortiManager, you must specify the firmware version that the managed devices in that ADOM will run. This is because FortiManager uses the firmware version to determine the available objects, features, and schema for policy packages and device configurations within the ADOM. Without selecting a firmware version, the ADOM cannot be created, as the version dictates the database structure and compatibility.

Answer

Assigning an IP address.

Answer

Defining a policy package.

Answer

Configuring SNMP.

Question 9

Which tab in the FortiManager GUI is primarily used for managing firewall policies and objects?

Accepted Answer

Policy & Objects. The 'Policy & Objects' tab in FortiManager is specifically designed for centralized management of firewall policies and address/service objects across multiple FortiGate devices. It allows administrators to create, edit, and install policy packages and object definitions, which are then pushed to managed devices. This tab provides a unified interface for policy orchestration, making it the primary location for these tasks.

Answer

FortiView

Answer

Device Manager

Answer

System Settings

Question 10

What is the purpose of 'Revision History' when it comes to policy packages?

Accepted Answer

To store and revert changes made to policies.. Revision History in FortiManager records every change made to policy packages, including who made the change, when, and what was modified. Its primary purpose is to allow administrators to view past versions and revert to a previous configuration if a change causes problems. This provides rollback capability and change accountability for policy packages.

Answer

To synchronize objects across ADOMs.

Answer

To generate audit reports.

Answer

To archive logs.