FORTINET-NSE56 Timed Practice Test 1 — 10 Questions

Question 1

Which dashboard provides a 'Threat Map'?

Accepted Answer

FortiView. The FortiView 'Threat Map' shows real-time global threat activity.

Answer

Report module

Answer

Device Manager

Answer

Log View

Question 2

Which THREE types of information are displayed in the System Information widget?

Accepted Answer

Firmware version. The system information widget provides at-a-glance status of uptime, firmware, and resource usage.

Answer

ADOM mode

Answer

Log forwarding destination

Question 3

An administrator is managing multiple FortiGate devices using FortiManager. They need to ensure that policy changes made in the ADOM are only pushed to specific firewalls. Which feature should they use to achieve granular control over policy deployment?

Accepted Answer

Policy Packages. Policy Packages allow administrators to group policies and apply them specifically to selected device groups or individual devices.

Answer

Global Policy Packages

Answer

Provisioning Templates

Answer

Device Groups

Question 4

You need to restrict an administrator to only viewing reports for a specific ADOM. How do you achieve this?

Accepted Answer

Assign to a specific ADOM. You assign the administrator to an 'Admin Profile' and associate them with a specific ADOM.

Answer

Change their password

Answer

Create a log filter

Answer

Enable 2FA

Question 5

You have a high volume of logs and need to ensure that the oldest logs are deleted first to make room for new data. Where is this configured?

Accepted Answer

ADOM settings. The 'Log Policy' or 'Disk Quota' settings under System Settings define how logs are managed when storage is full.

Answer

FortiView settings

Answer

Log forwarding settings

Answer

Report settings

Question 6

When should you use 'Log Archive' instead of 'Log Database'?

Accepted Answer

For long-term storage. 'Log Archive' is used for long-term cold storage of raw logs, whereas the database is for active searching.

Answer

For real-time traffic analysis

Answer

For triggering alerts

Answer

For generating daily reports

Question 7

When setting up a 'FortiSoC' playbook to send an email, what must be configured first?

Accepted Answer

The SMTP server settings. You must set up the 'Mail Server' or 'SMTP' settings in the System Settings to allow the FortiAnalyzer to send emails.

Answer

The report schedule

Answer

The log forwarder

Answer

The ADOM mode

Question 8

Which TWO of these are valid administrative roles in FortiAnalyzer?

Accepted Answer

Log_Admin. FortiAnalyzer supports predefined roles such as Super_User and Log_Admin.

Answer

Storage_Manager

Answer

Firewall_Admin

Answer

Report_Guest

Question 9

If a FortiAnalyzer is in 'Collector' mode, what is its primary limitation?

Accepted Answer

It cannot run reports. Collector mode is optimized for log reception and forwarding, but it cannot generate reports.

Answer

It cannot forward logs

Answer

It cannot store logs

Answer

It cannot receive logs from FortiGate

Question 10

In FortiSoC, what is the purpose of the 'Playbook Trigger'?

Accepted Answer

To define the start condition. The trigger defines the condition (e.g., an event) that initiates the playbook execution.

Answer

To start the logging process

Answer

To generate a report

Answer

To pause the FortiAnalyzer