Configure and Track Access Control Rules, IP Policies, and Recipient Policies NSE6-FORTIMAIL-ADMINISTRATOR Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is a typical action that an IP policy can enforce?

   • ARewrite the email subject
   • BAdd a disclaimer to the email
   • CReject the connection
   • DQuarantine the email message
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   An administrator is troubleshooting why a specific sender is not being rejected by an access control rule. The rule is set to reject 'spam@example.org'. The mail flow log shows the message was accepted. What is the most likely reason?

   • AThe sender's IP is in the IP reputation whitelist.
   • BThe IP policy for the sender's IP is set to 'Accept'.
   • CAnother access control rule placed above it is accepting the message.
   • DThe recipient policy for the recipient's domain is set to 'Accept'.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following would you examine to verify that an IP policy is being enforced?

   • AAntivirus signature database
   • BDNS zone files
   • CConnection logs
   • DUser mailbox quotas
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary purpose of an access control rule in FortiMail?

   • ATo encrypt email messages in transit between servers
   • BTo define how email is routed to different mail servers
   • CTo quarantine messages that are suspected of being spam
   • DTo permit or deny email traffic based on criteria such as sender, recipient, or connection attributes
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company's mail gateway receives a high volume of spam from a specific IP range (203.0.113.0/24). The administrator wants to block all traffic from this range before it reaches the content filter, but must ensure that legitimate mail from a partner's mail server (198.51.100.10) is still accepted. The partner's server is NOT in the blocked range. What should the administrator configure?

   • ACreate an IP policy for 203.0.113.0/24 with action 'Reject' and place it above any default IP policy.
   • BAdd the partner's IP to a global whitelist in the content filter settings.
   • CCreate an access control rule for sender domain 'partner.com' with action 'Accept' and place it above the IP policy.
   • DCreate a recipient policy for the partner's domain with action 'Accept' and place it above the IP policy.
   Reveal Solution Discussion Select an answer first