Sample questions
Fortinet NSE5/NSE6 (Network Security Analyst/Specialist tiers, per-product tracks) (FORTINET-NSE56) practice questions
Which dashboard provides a 'Threat Map'?
Which THREE types of information are displayed in the System Information widget?
An administrator is managing multiple FortiGate devices using FortiManager. They need to ensure that policy changes made in the ADOM are only pushed to specific firewalls. Which fe…
You need to restrict an administrator to only viewing reports for a specific ADOM. How do you achieve this?
You have a high volume of logs and need to ensure that the oldest logs are deleted first to make room for new data. Where is this configured?
When should you use 'Log Archive' instead of 'Log Database'?
When setting up a 'FortiSoC' playbook to send an email, what must be configured first?
Which TWO of these are valid administrative roles in FortiAnalyzer?
If a FortiAnalyzer is in 'Collector' mode, what is its primary limitation?
In FortiSoC, what is the purpose of the 'Playbook Trigger'?
Which TWO of the following are valid log file types supported by FortiAnalyzer?
What is the default port used for log transmission from FortiGate to FortiAnalyzer?
Which component of FortiAnalyzer is used to identify top talkers on the network?
When configuring an 'Event Handler' with a 'Threshold', what does the 'Count' field represent?
A customer wants to offload logs from FortiAnalyzer to a remote Syslog server. Where is this configured?
Where do you go to view the real-time logs currently being received by the FortiAnalyzer?
Which FortiView tool allows you to see traffic patterns based on geographical origin?
When troubleshooting a missing log issue in FortiAnalyzer, which CLI command is most useful for checking the status of the log database?
An administrator finds that the disk usage is at 95% and the FortiAnalyzer has stopped receiving new logs. What is the default behavior when the disk reaches the 'Maximum Storage'…
What is the purpose of 'Report Templates'?
A user reports that they cannot see any data in 'FortiView' for a specific device. What is the most likely cause?
Which administrative account type has full access to all ADOMs and system settings?
Which THREE elements are part of the Event Handler configuration?
Which object type should you use in FortiManager to ensure a consistent naming convention for address objects across multiple ADOMs?