Refer to the exhibit, which shows a detailed history log view. Which two actions did FortiMail take on this email message? (Choose two.)

Question

Exhibit

Options

• AFortJMail replaced the virus content with a message
• BFortiMail modified the subject of the email message.
• CFortiMail forwarded the email to User 1 without scanning.
• DFortiMail sent the email message to User 1's personal quarantine.

• A
  78% (21)
• C
  7% (2)
• D
  15% (4)

Explanation

FortiMail's antivirus action performed a content replacement (A) - swapping the malicious attachment or virus body with a plain-text notification - while simultaneously tagging the subject line (B), typically prepending something like [Malicious Content Replaced] to alert the recipient. Both actions are visible as distinct log entries in the history log view, confirming delivery with modifications rather than blocking.

Why C is wrong: Forwarding without scanning would produce no log actions at all; the presence of modification entries proves scanning occurred.

Why D is wrong: Quarantining holds the message on the server and does not deliver it to the user's inbox - the log would show a quarantine action, not a replacement/subject-modify pair.

Memory tip: Think "R&R - Replace and Retag." When FortiMail finds a virus but still delivers the email, it Replace the bad content and Retags the subject - two actions, both leaving a paper trail in the history log.

No community discussion yet for this question.