Configure and Track Access Control Rules, IP Policies, and Recipient Policies NSE6-FORTIMAIL-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the purpose of tracking access control rules in FortiMail?

   • ATo change the order of access control rules dynamically
   • BTo automatically create new access control rules based on traffic patterns
   • CTo monitor and verify the effectiveness of access control rules on email flow
   • DTo delete unused access control rules
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary function of an IP policy in FortiMail?

   • ATo specify which email domains are allowed to send mail through the system
   • BTo configure the encryption of email messages for specific recipients
   • CTo enforce security and routing decisions for connections from specific IP addresses or ranges
   • DTo define which users can access the FortiMail administration interface
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following criteria can be used in an access control rule to match email traffic?

   • ASender email address
   • BEmail subject line keywords
   • CAttachment file type
   • DMessage body size
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   An administrator has configured a recipient policy to add a disclaimer to all mail for 'external.example.com'. The mail flow log shows the policy is being applied. However, the administrator wants to verify that the disclaimer is actually being added to the messages. What should the administrator do?

   • ACheck the session log for the 'DATA' command.
   • BCheck the mail flow log for the 'disclaimer' action in the policy field.
   • CCheck the IP policy list for the sender's IP.
   • DSend a test message to 'external.example.com' and inspect the received message for the disclaimer.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A FortiMail administrator suspects that an IP policy for a known spam source is not being applied. The policy is set to 'Reject' for 203.0.113.0/24. Which log should the administrator check to confirm the policy is being enforced?

   • AThe session log, looking for connection attempts from 203.0.113.0/24 and the resulting action.
   • BThe mail flow log, looking for messages from the blocked range.
   • CThe recipient policy log, checking for the domain in the policy list.
   • DThe antivirus log, checking for malware from that IP.
   Reveal Solution Discussion Select an answer first