FCP_FML_AD-7.4 Exam Questions
63 real FCP_FML_AD-7.4 exam questions with expert-verified answers and explanations. Page 1 of 2.
- Question #1Data Loss Prevention and Identity-Based Encryption
Refer to the exhibit, which displays an encryption profile configuration. What happens if the attachment size of an IBE email exceeds 1024 KB?
IBE encryptionattachment size limitTLS fallbackencryption profile - Question #2Antispam
Which two antispam techniques query FortiGuard for rating information? (Choose two.)
FortiGuard queriesURL filterIP reputationantispam techniques - Question #3Email Operations
Refer to the exhibit, which displays an access control rule. What are two expected behaviors for this access control rule? (Choose two.)
access control ruleemail relaysender domainSMTP routing - Question #4Antispam
Refer to the exhibit, which shows a partial antispam profile configuration. What will happen to an email that triggers Spam outbreak protection?
spam outbreak protectionantispam actiondeferred queuelogging - Question #5Initial Setup and Configuration
In which two ways does a transparent mode FortiMail use the build-it MTA to process email? (Choose two.)
transparent modebuilt-in MTAMX lookupDSN generation - Question #6Email Operations
Refer to the exhibit, which shows an inbound recipient policy. After creating the policy, an administrator discovers that clients can send Inbound Recipient Policy unauthenticated...
SMTP authenticationaccess receive ruleinbound recipient policyauthentication enforcement - Question #7Initial Setup and Configuration
What are two reasons for having reliable DNS servers configured on FortiMail? (Choose two.)
DNS configurationFortiGuard connectivityemail transmissionMX lookup - Question #8Email Operations
Refer to the exhibit, which shows the output of an email transmission using a telnet session. What are two correct observations about this SMTP session? (Choose two.)
SMTP protocolSMTP bannermessage headerSMTP envelope - Question #9Initial Setup and Configuration
Refer to the exhibit, which shows the mail server settings of a FortiMail device: What are two ways this FortiMail device will handle connections? (Choose two.)
SMTPSSTARTTLSTLS encryptionmail server settings - Question #10Initial Setup and Configuration
Refer to the exhibit, which displays the Mail Settings page of a FortiMail device running in gateway mode. In addition to selecting Check External Domain in the MTA-STS service fie...
MTA-STSTLS profilegateway modesecure mail transport - Question #11High Availability and Disaster Recovery
Which license must you apply to a FortiMail device to enable the HA centralized monitoring features?
HA licensecentralized monitoringMSSP licenseAdvanced Management - Question #12High Availability and Disaster Recovery
Which two factors are required for an active-active HA configuration of FortiMail in server mode? (Choose two.)
active-active HANAS storageload balancerserver mode - Question #13Data Loss Prevention and Identity-Based Encryption
Refer to the exhibit, which shows the IBE Encryption page of a FortiMail device. Which user account behavior can you expect from these IBE settings?
IBE user accountaccount expiryinactivity timeoutportal registration - Question #14Antivirus and Sandbox
Refer to the exhibit, which shows an antivirus action profile. What are two expected outcomes if FortiMail applies this antivirus action profile to an email? (Choose two.)
antivirus action profilesystem quarantinereplacement messagevirus sanitization - Question #15Email Operations
Refer to the exhibit, which shows a topology diagram of two MTAs. MTA-1 is delivering an email intended for User 1 to MTA-2. User 1 uses Outlook as an email client. Which two state...
SMTPIMAPPOP3MTA protocol - Question #16Data Loss Prevention and Identity-Based Encryption
Refer to the exhibits, which shows a DLP scan profile configuration (DLP Scan Rule 1 and DLP Scan Rule 2) from a FortiMail device. Which two message types will trigger this DLP sca...
DLP scan rulecredit card detectionemail body scanDLP policy - Question #17Email Operations
Refer to the exhibit, which displays the domain configuration of a FortiMail device running in transparent mode. Based on the exhibit, which two sessions are considered incoming se...
transparent modeincoming sessiondomain configurationsession classification - Question #18Antispam
Refer to the exhibits, which show a topology diagram (Topology) and a configuration element (IP Policy): An administrator has enabled the sender reputation feature in the Example_S...
sender reputationIP policy exclusive flagoutbound emaildeferred queue - Question #19Antispam
Refer to the exhibit, which shows the Authentication Reputation list on a FortiMail device running in gateway mode. Why was the IP address blocked?
authentication reputationSMTPS login failuresIP blockingbrute force protection - Question #20Logging and Reporting
Refer to the exhibits, which show an email archiving configuration (Email Archiving 1 and Email Archiving 2) from a FortiMail device. What two archiving actions will FortiMail take...
email archivingjournal accountspam exemptionarchive policy - Question #21Logging and Reporting
Refer to the exhibit, which displays a history log entry. In the Policy ID column, why is the last policy ID value SYSTEM?
history logpolicy IDSYSTEM policyrecipient-based policy - Question #22Email Operations
A FortiMail is configured with the protected domain example.com. On this FortiMail, which two envelope addresses are considered incoming? (Choose two.)
protected domainincoming emailenvelope addressSMTP direction - Question #23Initial Setup and Configuration
Refer to the exhibit, which displays a topology diagram. Which two statements describe the built-in bridge functionality on a transparent mode FortiMail? (Choose two.)
transparent modebridge interfacemanagement IProuted interface - Question #24Data Loss Prevention and Identity-Based Encryption
Refer to the exhibit, which displays a list of IBE users on a FortiMail device. Which statement describes the pre-registered status of the IBE user [email protected]?
IBEpre-registered statususer registrationnotification email - Question #25Email Operations
In which two places can the maximum email size be overridden on FortiMail? (Choose two.)
email size limitresource profileprotected domainIP policy - Question #26Data Loss Prevention and Identity-Based Encryption
Which item is a supported one-time secure token for IBE authentication?
IBEone-time tokenauthenticationsecurity question - Question #27Data Loss Prevention and Identity-Based Encryption
What are two disadvantages of configuring the dictionary and DLP scan rule aggressiveness too high? (Choose two.)
DLPscan aggressivenessfalse positivesresource usage - Question #28Email Operations
In which FortiMail configuration object can you assign an outbound session profile?
session profileoutbound policyIP policypolicy assignment - Question #29Antispam
A FortiMail administrator is investigating a sudden increase in DSNs being delivered to their protected domain. After searching the logs, the administrator identifies that the DSNs...
DSNbounce address tag validationbackscatterantispam - Question #30Logging and Reporting
Refer to the exhibit, which shows a detailed history log view. Which two actions did FortiMail take on this email message? (Choose two.)
history logantivirus actionsubject modificationlog interpretation - Question #31High Availability and Disaster Recovery
Refer to the exhibit, which shows a topology diagram of a FortiMail cluster deployment. Which IP address must the DNS MX record for this organization resolve to?
DNS MX recordcluster deploymentvirtual IPHA topology - Question #32Email Operations
Refer to the exhibits, which display a topology diagram (Topology) and two FortiMail device configurations (FML1 Configuration and FML2 Configuration). What is the expected outcome...
SMTPSSTARTTLSTLS configurationSMTP session - Question #33Antispam
Which two FortiMail antispam techniques can you use to combat zero-day spam? (Choose two.)
zero-day spamIP reputationspam outbreak protectionantispam techniques - Question #34Antispam
Which statement about how impersonation analysis identifies spoofed email addresses is correct?
impersonation analysisDMARCspoofed emaildisplay name - Question #35Email Operations
Refer to the exhibit, which shows an nslookup output of MX records of the example.com domain. Which two MTA selection behaviors for the example.com domain are correct? (Choose two....
MX recordsMTA selectionDNS prioritymail routing - Question #36Logging and Reporting
While reviewing logs, an administrator discovers that an incoming email was processed using policy IDs 0:4:9:INTERNAL. Which two statements describe what this policy ID means? (Cho...
policy IDIP policyaccess delivery ruleINTERNAL relay - Question #37Antispam
Which FortiMail feature combats spammers who try to hide spam content in delivery status notifications (DSN) messages?
BATVDSNbackscatter spamdelivery status notification - Question #38Antispam
What are two benefits of having authentication reputation tracking enabled on FortiMail? (Choose two.)
authentication reputationbrute forceIP trackingaccount lockout - Question #39Data Loss Prevention and Identity-Based Encryption
Which two statements describe the push delivery method used by IBE? (Choose two.)
IBEpush deliveryHTML attachmentHTTPS secure portal - Question #40Antispam
A FortiMail administrator is investigating a sudden increase in DSNs being delivered to their protected domain. After searching the logs, the administrator identifies that the DSNs...
DSNbounce address tag validationbackscatterantispam - Question #41Initial Setup and Configuration
An organization has different groups of users with different needs in email functionality, such as address book access, mobile device access, email retention periods, and disk quot...
resource profilesserver modeuser managementdisk quotas - Question #42Email Operations
A FortiMail device is configured with the protected domain example.com. If senders are not authenticated, which two envelope addresses will require an access receive rule? (Choose...
access receive rulesprotected domainrelay controlSMTP envelope - Question #43Email Operations
A mail user wants the ability to subscribe or publish to and from their FortiMail calendar using Thunderbird as their mail user agent (MUA). What information does this mail user ne...
webmailcalendarservice URLsThunderbird integration - Question #44Email Operations
What are two benefits of enabling the header manipulation feature? (Choose two.)
header manipulationemail privacyinternal networkmessage headers - Question #45Initial Setup and Configuration
Which are FortiMail operating modes? (Choose three.)
operating modestransparent modeserver modegateway mode - Question #46Antispam
When the domain keys identified mail (DKIM) feature is used, where is the public key stored?
DKIMDNS TXT recordpublic keyemail authentication - Question #47Antivirus and Sandbox
Which three actions does FortiSandbox perform when it is integrated with FortiMail for advanced threat protection (ATP)? (Choose three.)
FortiSandboxATPsandbox integrationthreat analysis - Question #48High Availability and Disaster Recovery
Refer to the exhibits. The exhibits display a topology diagram of a FortiMail cluster (Topology) and the primary HA interface configuration of the Primary FortiMail (HA Interface C...
HA interfacevirtual IPheartbeatprimary configuration - Question #49Antispam
Which three configuration steps must you set to enable DKIM signing for outbound messages on FortiMail? (Choose three.)
DKIM signingsession profileDNS TXT recordkey pair generation - Question #50High Availability and Disaster Recovery
When configuring a FortiMail HA group consisting of different models, which two statements are true? (Choose two.)
HA clustermixed modelsfirmware versioncluster capacity