A company has a recipient policy that routes mail for 'archive.example.com' to a separate server. The administrator notices that some messages to that domain are not being routed correctly. The mail flow log shows the policy was not applied. What should the administrator check first?

The order of the recipient policies; a broader policy might be matching first.

The session log for the SMTP conversation.

The access control rule for the sender's address.

The IP policy for the sender's IP address.

An administrator has configured several access control rules to block spam from specific senders. After a week, the administrator wants to see how many messages were blocked by each rule to determine if the rules are effective. What should the administrator use?

The mail flow log, filtered by the rule ID or name.

The IP policy list, checking the hit counter for each policy.

The recipient policy list, reviewing the match count.

The SMTP session log, looking for 'RCPT TO' commands.

An administrator has configured a recipient policy to add a disclaimer to all outgoing mail to 'external.example.com'. After implementation, the administrator wants to verify that the policy is working. Which log or report should be used?

The access control rule list, verifying the sender is allowed.

The IP policy list, checking the hit counter for the sender's IP.

The mail flow log, filtering for messages to 'external.example.com' and checking the 'policy' field.

The session log, looking for the 'DATA' command for those recipients.

An administrator has configured an access control rule to reject mail from 'spam@example.org'. The rule is placed at the top of the list. However, the mail flow log shows that messages from this sender are still being accepted. What is the most likely cause?

The sender's IP is allowed by an IP policy placed before the access control rule.

The recipient policy for the recipient's domain is set to 'Accept'.

The mail flow log is not recording access control rule matches.

The access control rule is disabled or has a condition that does not match the actual sender.

An administrator notices that a legitimate bulk-mail sender is being rejected by the FortiMail unit. The sender's IP is 192.0.2.50. The administrator wants to ensure this sender is always accepted, but only for the domain 'newsletter.example.com', and wants to verify the rule is being applied. What should the administrator do?

Create an access control rule for sender 'newsletter@192.0.2.50' with action 'Accept' and enable logging.

Create an IP policy for 192.0.2.50 with action 'Accept' and enable session logging for that policy.

Add 192.0.2.50 to the IP reputation whitelist and check the mail flow log.

Create a recipient policy for 'newsletter.example.com' with action 'Accept' and enable logging.

FortinetNSE 6 - FortiMail Administrator

Domain 2Objective 3

Configure and Track Access Control Rules, IP Policies, and Recipient Policies NSE6-FORTIMAIL-ADMINISTRATOR Practice Questions (Page 4)

Part of the Email Flow and Authentication domain, which makes up ~19% of our current practice bank.

23questions here

5free pages

6concepts

Questions 16–20

16expert · hard
A company has a recipient policy that routes mail for 'archive.example.com' to a separate server. The administrator notices that some messages to that domain are not being routed correctly. The mail flow log shows the policy was not applied. What should the administrator check first?
Select an answer first
17application · medium
An administrator has configured several access control rules to block spam from specific senders. After a week, the administrator wants to see how many messages were blocked by each rule to determine if the rules are effective. What should the administrator use?
Select an answer first
18application · medium
An administrator has configured a recipient policy to add a disclaimer to all outgoing mail to 'external.example.com'. After implementation, the administrator wants to verify that the policy is working. Which log or report should be used?
Select an answer first
19expert · hard
An administrator has configured an access control rule to reject mail from 'spam@example.org'. The rule is placed at the top of the list. However, the mail flow log shows that messages from this sender are still being accepted. What is the most likely cause?
Select an answer first
20application · medium
An administrator notices that a legitimate bulk-mail sender is being rejected by the FortiMail unit. The sender's IP is 192.0.2.50. The administrator wants to ensure this sender is always accepted, but only for the domain 'newsletter.example.com', and wants to verify the rule is being applied. What should the administrator do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE6-FORTIMAIL-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE6-FORTIMAIL-ADMINISTRATOR” is a trademark of its owner, used for identification only.