Configure Identity-Based Encryption (IBE) NSE6-FORTIMAIL-ADMINISTRATOR Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   When enabling IBE for users in FortiMail, what is the typical prerequisite that must be configured first?

   • AAn IBE domain and the associated DNS records
   • BA valid digital certificate for the FortiMail server
   • CA user account for each external recipient in the FortiMail system
   • DA dedicated IP address for the FortiMail server
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company is migrating from S/MIME to IBE for external email encryption. During the transition, some clients still use S/MIME and others will use IBE. The administrator needs to ensure that emails are encrypted appropriately for both types of recipients. What is the best approach?

   • AEncrypt all emails with both S/MIME and IBE
   • BUse IBE for all recipients and disable S/MIME
   • CUse S/MIME for all recipients and ignore IBE
   • DConfigure separate policies for S/MIME and IBE based on recipient domain or address
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   An administrator is configuring IBE in FortiMail. They want to ensure that only emails sent to recipients in the 'example.com' domain are encrypted, while emails to other domains remain unencrypted. How should the administrator configure this?

   • ADefine 'example.com' as an IBE domain and create a policy that applies IBE only to that domain
   • BSet the IBE domain to 'example.com' and enable IBE for all users
   • CConfigure a content filter that encrypts emails containing 'example.com' in the recipient address
   • DEnable IBE globally and then exclude all other domains
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   An organization has a FortiMail IBE deployment where external recipients access encrypted messages via the web portal. The security team is concerned about the portal being exposed to the internet. They want to add an additional layer of security without affecting the user experience for legitimate recipients. What should the administrator implement?

   • AConfigure multi-factor authentication (MFA) for the IBE portal
   • BUse a self-signed certificate for the portal
   • CRestrict portal access to specific IP addresses
   • DDisable the portal and send encrypted messages as attachments
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   An organization uses FortiMail IBE. An external recipient reports that they received a notification email with a link to view the encrypted message, but the link is not working. The administrator checks the IBE gateway and finds it is online. What should the administrator verify next?

   • AThe recipient's email client supports HTML emails
   • BThe recipient's email address is correctly spelled in the notification
   • CThe IBE gateway has enough disk space to store the encrypted message
   • DThe URL in the notification email is correctly configured to point to the public IBE portal
   Reveal Solution Discussion Select an answer first