FORTINET-NSE56 Practice Test 9 — 10 Questions

Question 1

An administrator wants to perform a 'Re-install Policy' on a subset of devices without changing their current configuration settings. Which install option should be selected?

Accepted Answer

Re-install Policy. The 'Re-install Policy' option pushes the existing policy package to the target devices without altering device-level settings or object definitions, effectively re-applying the current policy configuration. It is used when policies need to be re-pushed (e.g., after a failed install or to resynchronize) while preserving the device's current configuration.

Answer

Install Config and Policy

Answer

Factory Reset and Install

Answer

Install Device Settings

Answer

Re-install Objects Only

Question 2

What is the primary benefit of deploying FortiMail in a cluster?

Accepted Answer

To provide high availability and fault tolerance.. Deploying FortiMail in a cluster (HA) provides high availability and fault tolerance: if one unit fails, another takes over seamlessly, ensuring mail flow and spam/virus scanning continue without interruption. This is the primary design goal of FortiMail HA, which supports active-passive and config-sync modes.

Answer

To bypass the need for a mail server.

Answer

To reduce the cost of licensing.

Answer

To increase the number of physical ports.

Question 3

What is the primary difference between a Gateway and a Server mode deployment?

Accepted Answer

Gateway mode relays to backend servers.. In Fortinet's email security deployments, Gateway mode acts as a relay or SMTP proxy that receives email and forwards it to backend mail servers (e.g., Exchange) after scanning. Server mode, by contrast, stores mailboxes locally and provides final delivery. The primary difference is therefore that Gateway mode relays to backend servers, while Server mode is the final destination.

Answer

Gateway mode provides storage.

Answer

Gateway mode supports LDAP.

Answer

Gateway mode ignores AntiSpam.

Question 4

In which configuration area are 'Content Profiles' created and modified?

Accepted Answer

Profile settings.. Content Profiles in FortiMail are created and modified under the Profile settings configuration area. This is where administrators define the scanning behavior for content — including banned words, file types, and encryption rules — that can then be applied to access control rules and policies. The Profile settings area is the central repository for all profile-type objects (AntiSpam, AntiVirus, Content, Resource).

Answer

Domain settings.

Answer

System settings.

Answer

Network settings.

Question 5

A developer wants to use a REST API to configure FortiADC objects. Where can you find the documentation and schema for the FortiADC API?

Accepted Answer

In the API Explorer within the FortiADC GUI. FortiADC includes a built-in API Explorer accessible from the GUI (typically under System > API Explorer or via a /api/v1/... endpoint) that documents all REST API endpoints, request/response schemas, and parameters. It is the authoritative, version-matched reference for developers writing automation against FortiADC.

Answer

On the FortiGuard portal

Answer

In the CLI reference guide

Answer

By calling technical support

Question 6

Which DNS record must be published in the public DNS to enable DKIM signing for outgoing mail?

Accepted Answer

TXT record containing the public key. DKIM (DomainKeys Identified Mail) uses a public key published as a TXT record in DNS, typically at a selector._domainkey.domain.com. The receiving server uses this public key to verify the signature added to outgoing emails. This ensures authenticity and integrity.

Answer

PTR record

Answer

A record

Answer

MX record

Question 7

If a FortiAnalyzer is in 'Collector' mode, what is its primary limitation?

Accepted Answer

It cannot run reports. In FortiAnalyzer, 'Collector' mode is designed purely for high-volume log collection and forwarding/storage — it does not include the analytics and reporting engine. As a result, a FortiAnalyzer operating in Collector mode cannot generate reports, run log-based analytics, or provide the full GUI reporting features available in Analyzer mode. This mode is typically used in large distributed environments where a dedicated collector forwards logs to a central analyzer.

Answer

It cannot forward logs

Answer

It cannot store logs

Answer

It cannot receive logs from FortiGate

Question 8

What is the purpose of 'Log Forwarding' in FortiAnalyzer?

Accepted Answer

To send logs to external systems. Log Forwarding in FortiAnalyzer enables the appliance to relay received logs to external destinations such as syslog servers, CEF collectors, or another FortiAnalyzer. This is essential for integrating FortiAnalyzer into a broader SIEM ecosystem (e.g., Splunk, ArcSight) or for long-term archival on external storage. The feature does not alter local storage, CPU, or configuration backup behavior — it simply duplicates/forwards log streams to configured remote endpoints.

Answer

To backup the configuration

Answer

To increase report speed

Answer

To reduce CPU usage

Question 9

An administrator notices that the 'Device Manager' status is 'Unsynchronized'. What is the recommended first step to resolve this?

Accepted Answer

Retrieve Config.. When the Device Manager status shows 'Unsynchronized', it means the FortiManager's configuration database is out of sync with the managed FortiGate. The recommended first step is to retrieve the configuration from the FortiGate ('Retrieve Config') to update FortiManager with the current device configuration, which resolves the synchronization issue.

Answer

Change the ADOM version.

Answer

Reboot the FortiGate.

Answer

Re-install the firmware.

Question 10

You are deploying FortiMail in Transparent mode. Which configuration step is mandatory to ensure traffic is inspected without modifying the IP headers of the email packets?

Accepted Answer

Configure the Bridge pair under Network > Interface.. In FortiMail Transparent mode, the mandatory step is to configure a Bridge pair under Network > Interface. The bridge pair binds two interfaces together so FortiMail can inspect email traffic inline without altering IP headers, effectively acting as a Layer 2 bridge. This is the defining configuration for Transparent mode operation.

Answer

Configure the Bridge pair and disable IP forwarding.

Answer

Configure static IP routing on the management interface.

Answer

Assign a virtual IP to the WAN interface.