Fortinet Certified Email Security Professional

1.

A FortiMail unit installed in Transparent mode protects a mail domain training1.lab on a mail server with IP address 172.16.1.1. On the protected domain, the Use this domains SMTP server to deliver the mail setting is ENABLED and the Hide the transparent box setting is DISABLED. An email from userA@external.lab to user1@training1.lab (172.16.1.1) is intercepted by the FortiMail unit. Which of the following statements is true based on this scenario?

The FortiMail unit does its own MX Lookup to route the email to its destination. The FortiMail unit will act as a full transparent proxy between the client and the mail server with the IP address 172.16.1.1. The FortiMail unit will add a received header to the email message. The FortiMail unit will forward the email message using the original source IP address of the client.

2.

What is the outcome of the following CLI commands executed on a FortiMail unit operating in Transparent Mode? config system interface edit port1 set ip 192.168.1.20 255.255.255.0 set allowaccess http ping ssh end

The management IP address of the unit will be 192.168.1.20/24. The unit will accept HTTPS sessions on port1. The unit will accept Telnet sessions on port1. The unit will accept HTTP sessions on port1.

3.

Which of the following sentences is true regarding a Config Only cluster?

Only two FortiMail units can join a Config Only cluster. The entire configuration file is synchronized between cluster members. Mail data and MTA queues are synchronized. A maximum of 25 FortiMail units can join a Config Only cluster. A Config Only cluster is generally deployed behind a Load Balancer.

4.

A FortiMail administrator has added a Virtual IP address to the port2 interface of an Active Passive Cluster. Which of the following statements is true regarding this scenario?

The master unit can be reached using both physical IP and virtual IP addresses. The master unit can be reached only by using its physical IP address. The virtual IP address is always associated to the active master of a cluster. The virtual IP address overrides the physical IP address.

5.

Which of the following back-end servers can NOT be used to provide Recipient Verification?

LDAP servers POP3 servers RADIUS servers SMTP servers

6.

Which of the following situations could explain why an email message would be in the dead mail queue on a FortiMail unit operating in Gateway mode?

The DNS server is not responding. The upstream Mail Transfer Agent (MTA) is performing Greylisting against the sender of the email message. The sender and the recipient addresses are invalid. There is a temporary network problem.

7.

A System Administrator is concerned by the amount of system resources being used to store quarantine email messages for non-existent accounts. Which of the following techniques can be used on a FortiMail unit to free up system resources?

Greylist scanning Recipient Address Verification Sender Reputation Automatic Removal of Invalid Quarantine Accounts

8.

Which of the following features can be used to hide internal email domains and email addresses?

User Alias Address Map User Group Group Alias

9.

An SMTP client successfully authenticates with a FortiMail unit with no access list entries configured. Which of the following statements correctly describes the expected behavior of the FortiMail unit in this scenario?

The FortiMail unit will relay all email messages from the authenticated client. The FortiMail unit will deny relaying the email message and will send an SMTP 550 error to the authenticated client. The FortiMail unit will only relay email messages from the authenticated client to recipients on the FortiMail unit's protected email domains. The FortiMail unit will discard all email messages from the authenticated client.

10.

A FortiMail unit is installed in Gateway mode and is protecting a single email domain. Which of the following statements is NOT true in this scenario?

An incoming recipient-based policy can be used to apply scanning to email messages destined to the protected domain. The DNS MX record for the protected domain must point to the FortiMail unit FQDN for incoming SMTP email messages to be scanned. The mail server or email clients must use the FortiMail unit as the SMTP relay to enable scanning of outgoing SMTP email messages. An access control list entry must be configured to allow the FortiMail unit to relay incoming traffic to the protected domain.

Fortinet Certified Email Security Professional

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Fortinet Certified Email Security Professional

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner