FORTINET-NSE56 Practice Test 8 — 10 Questions

Question 1

You are troubleshooting a sync issue where a device shows 'Modified' status in the Device Manager. What is the most likely cause?

Accepted Answer

The configuration on the FortiGate was changed locally.. When a device shows 'Modified' status in FortiManager's Device Manager, it typically means the configuration on the FortiGate has been changed locally and is out of sync with the FortiManager's database. This can happen if someone logs into the FortiGate directly and makes changes.

Answer

The FortiManager license has expired.

Answer

The FortiManager firmware is outdated.

Answer

The policy package was deleted.

Question 2

If an administrator needs to ensure that a specific set of CLI commands is always applied during the deployment of a new device, which tool should be used?

Accepted Answer

CLI Template. A CLI Template in FortiManager stores a reusable set of CLI commands that can be automatically applied to devices during provisioning or deployment. This ensures a consistent baseline configuration is pushed to new devices without manual intervention, exactly matching the requirement to always apply a specific command set.

Answer

Global Database

Answer

Policy Package

Answer

Import Wizard

Question 3

What must occur before a FortiGate can be managed by a specific ADOM in FortiManager?

Accepted Answer

The FortiGate must be added and authorized in the Device Manager.. Before FortiManager can manage a FortiGate within a specific ADOM, the device must be added to that ADOM and authorized. Adding and authorizing in Device Manager establishes the management tunnel and trust relationship, after which the FortiGate appears in the ADOM's device list and can receive policy packages and templates.

Answer

The ADOM must be in 'Advanced' mode.

Answer

A policy package must be created first.

Answer

The FortiGate must be in a 'Disconnected' state.

Question 4

If you need to change the log storage retention period for a specific ADOM, where is this setting located?

Accepted Answer

ADOM Log Policy. In FortiAnalyzer, log retention is configured per ADOM under the ADOM's Log Policy settings (ADOM Log Policy), where you define the retention period, disk quota, and log rollover behavior for that specific ADOM. This allows different ADOMs to have different retention windows based on compliance or operational needs.

Answer

FortiView Filters

Answer

Report Settings

Answer

Global System Settings

Question 5

Which of the following is a valid method for importing a FortiGate configuration into FortiManager?

Accepted Answer

Upload the backup file via the 'Import' GUI option in the device list.. FortiManager provides a GUI-based Import option in the Device Manager device list that allows an administrator to upload a FortiGate backup configuration file and import it into FortiManager. This is the supported, documented method for bringing an existing FortiGate configuration into FortiManager without requiring the device to be online. The other options describe unsupported or nonsensical methods.

Answer

By modifying the FortiManager's config file manually.

Answer

Using a USB drive plugged into the FortiManager.

Answer

Emailing the configuration to the FortiManager.

Question 6

An administrator wants to ensure that all outgoing emails are archived to a secondary server. Where is this configured?

Accepted Answer

Archiving policy. In FortiMail, archiving policies are specifically designed to capture and store email messages to a secondary server for compliance, eDiscovery, or backup purposes. The archiving policy defines the direction (incoming/outgoing), the matching criteria (sender, recipient, etc.), and the archive server destination. This is the only option that directly provides email archiving functionality.

Answer

Access Control rule

Answer

AntiSpam profile

Answer

Routing policy

Question 7

You notice that the FortiMail system time is incorrect, causing issues with SSL/TLS certificate validation. How do you correct this?

Accepted Answer

Configure an NTP server.. Incorrect system time on FortiMail breaks SSL/TLS certificate validation because certificates have validity windows and the TLS handshake checks the current time against 'notBefore' and 'notAfter'. The correct fix is to configure an NTP server so FortiMail synchronizes its clock accurately and continuously.

Answer

Disable SSL certificate validation.

Answer

Restart the system clock service.

Answer

Manually update via the CLI.

Question 8

How can you view the current number of emails in the quarantine?

Accepted Answer

On the dashboard.. The current number of emails in the quarantine can be viewed on the dashboard. FortiMail's dashboard provides a real-time summary of system status, including quarantine statistics such as the number of messages currently held. This is the quickest way to see quarantine counts without running reports or digging into logs.

Answer

By running a hardware diagnostic.

Answer

In the policy editor.

Answer

In the system logs.

Question 9

You are implementing a WAF policy for a web application. Which profile should you use to prevent the disclosure of sensitive server-side information in error messages?

Accepted Answer

Data Leak Prevention profile. The Data Leak Prevention profile in FortiWeb is designed to inspect outbound HTTP responses for patterns that match sensitive information, such as credit card numbers, social security numbers, or internal server details. When an application generates an error message that includes stack traces, database queries, or file paths, this profile can detect and mask or block that data before it reaches the client. This directly prevents the disclosure of sensitive server-side information, which is the goal stated in the question.

Answer

XSS profile

Answer

SQL Injection profile

Answer

Cookie security profile

Question 10

What is the function of the 'Check for Updates' feature in FortiManager's FortiGuard settings?

Accepted Answer

To update antivirus, IPS, and application control signatures.. The 'Check for Updates' feature in FortiManager's FortiGuard settings queries the FortiGuard Distribution Network (FDN) to retrieve the latest antivirus, IPS, application control, web filter, and other security service signature packages. These signatures are then distributed to managed FortiGate devices so their security profiles can detect current threats. It does not touch hardware inventory, licensing, or FortiManager's own firmware.

Answer

To check for new FortiGate hardware models.

Answer

To verify the license key.

Answer

To update the FortiManager firmware.