Fortinet fcp fml ad 7 4 practice test
FCP - FortiMail 7.4 Administrator
Question 1
Refer to the exhibit.
Refer to the exhibits, which shows a DLP scan profile configuration (DLP Scan Rule 1 and DLP Scan
Rule 2) from a FortiMail device.
Which two message types will trigger this DLP scan rule? (Choose two.)
- A. An email that contains credit card numbers in the body, attachment, and subject will trigger this scan rule.
- B. An email sent from sales@internal. lac will trigger this scan rule, even without matching any conditions.
- C. An email message that contains credit card numbers in the body will trigger this scan rule.
- D. An email message with a subject that contains the term 'credit card" will trigger this scan rule.
Answer:
C, D
Question 2
Refer to the exhibit, which displays a history log entry.
In the Policy ID column, why is the last policy ID value SYSTEM?
- A. The email was dropped by a system blacklist.
- B. The email matched a system-level authentication policy.
- C. It is an inbound email.
- D. The email did not match a recipient-based policy.
Answer:
D
Question 3
Refer to the exhibit, which shows the Authentication Reputation list on a FortiMail device running in
gateway mode.
Why was the IP address blocked?
- A. The IP address had consecutive SMTPS login failures to FortiMail..
- B. The IP address had consecutive IMAP login failures to FortiMail.
- C. The IP address had consecutive administrative password failures to FortiMail.
- D. The IP address had consecutive SSH login failures to FortiMail.
Answer:
A
Question 4
Which three configuration steps must you set to enable DKIM signing for outbound messages on
FortiMail? (Choose three.}
- A. Generate a public/private key pair in the protected domain configuration.
- B. Enable the DKIM checker in a matching session profile.
- C. Publish the public key as a TXT record in a public DNS server.
- D. Enable the DKIM checker in a matching antispam profile.
- E. Enable DKIM signing for outgoing messages in a matching session profile.
Answer:
A, C, E
Question 5
Exhibit.
Refer to the exhibits, which show an email archiving configuration (Email Archiving 1 and Email
Archiving 2) from a FortiMail device.
What two archiving actions will FortiMail take when email messages match these archive policies?
(Choose two.)
- A. FortiMail will save archived email in the journal account.
- B. FortiMail will archive email sent from marketingexample. com.
- C. FortiMail will exempt spam email from archiving.
- D. FortiMail will allow only the marketingeexample.com account to access the archived email.
Answer:
A, C
Question 6
Refer to the exhibit, which shows a topology diagram of two MTAs.
MTA-1 is delivering an email intended for User 1 to MTA-2. User 1 uses Outlook as an email client.
Which two statements about protocol usage between these devices are correct? (Choose two.)
- A. User 1 will use IMAP or POP3 to download the email message from MTA-2.
- B. MTA-2 will use IMAP to download the email message from MTA-1.
- C. MTA-1 will use SMTP to deliver the email message to MTA-2.
- D. MTA-1 will use POP3 to deliver the email message to User 1 directly.
Answer:
A, C
Question 7
Refer to the exhibit.
Refer to the exhibit, which shows an antivirus action profile.
What are two expected outcomes if FortiMail applies this antivirus action profile to an email?
(Choose two.)
- A. Virus content will be removed from the email.
- B. The original email will be sent to the system quarantine.
- C. The sanitized email will be sent to the recipient's personal quarantine.
- D. A replacement message will be added to the email.
Answer:
A, D
Question 8
Which two antispam techniques query FortiGuard for rating information? (Choose two.)
- A. DNSBL
- B. IP reputation
- C. URL filter
- D. SURBL
Answer:
B, C
Question 9
While testing outbound MTA functionality, an administrator discovers that all outbound email is
being processed using policy ID l: 2:0: SYSTEM. What are two possible reasons why the third policy ID
value is o? (Choose two.)
- A. IP policy ID 2 has the exclusive flag set.
- B. There are no outgoing recipient policies configured.
- C. Outbound email is being rejected.
- D. There are no access delivery rules configured for outbound email.
Answer:
A, B
Question 10
What are Two reasons for having reliable DNS servers configured on FortiMail? (Choose two.)
- A. Email transmission
- B. Firmware updates
- C. FortiGuard Connectivity
- D. HA synchronization
Answer:
A, C
Question 11
Exhibit.
Reter to the exhibit, which shows the IBE Encryption page of a FortiMail device. Which user account
behavior can you expect from these IBE settings?
- A. After initial registration. IBE users can access the secure portal without authenticating again for 90 days.
- B. Registered IBE users have 90 days from the time they receive a notification email message to access their IBE email.
- C. IBE user accounts will expire after 90 days of inactivity and must register again to access new IBE email message.
- D. First time IBE users must register to access their email within 90 days of receiving the notification email message
Answer:
C
Question 12
A FortiMail is configured with the protected domain example.com.
On this FortiMail, which two envelope addresses are considered incoming? (Choose two.)
- A. EMAIL FROM: nisGhosted.r.et RCPT 70: noceexampIe.com
- B. MAIL FROM: supporteexample.com RCPT TO: [email protected]
- C. MAIL FROM: accountsGexample.ccm RCPT TO: [email protected]
- D. MAIL FROM: training&external.crg RCPT TO: student30extersal.org
Answer:
B, C
Question 13
Refer to the exhibit, which shows a few lines of FortiMail logs.
Based on these log entries, which two statements describe the operational status of this FortiMail
device? (Choose two.)
- A. FortiMail is experiencing issues accepting the connection from the external. lab MTA.
- B. FortiMail is experiencing issues delivering the email to the internal. lab MTA.
- C. The FortiMail device is in server mode.
- D. The FortiMail device is in gateway or transparent mode.
Answer:
B, D
Question 14
Refer to the exhibit, which shows the output of an email transmission using a telnet session.
What are two correct observations about this SMTP session? (Choose two.)
- A. The SMTP envelope addresses are different from the message header addresses.
- B. The "Subject" is part of the message header.
- C. The"220 mx. internal, lab ESMTP Smtpd" message is part of the SMTP banner.
- D. The "250 Message accepted for delivery" message is part of the message body.
Answer:
B, C
Question 15
Which license must you apply to a FortiMail device to enable the HA centralized monitoring
features?
- A. Cloud gateway license
- B. Advanced Management and MSSP license
- C. Office 365 protection license
- D. Enterprise license
Answer:
B