An organization's FortiMail gateway recently had its TLS certificate renewed. The administrator notices that some external partners are still receiving certificate warnings when connecting to the gateway. The certificate is valid and correctly assigned. What is the most likely cause of the warnings?

The partners' mail servers have the old certificate cached and need to be restarted.

The intermediate CA certificate was not uploaded to FortiMail along with the new certificate.

The TLS policy is set to 'Opportunistic' instead of 'Required'.

The DNS A record for the gateway's hostname has changed.

A FortiMail administrator is preparing to replace an expiring TLS certificate. The new certificate has been issued by a public CA and includes the hostname 'mail.example.com'. The administrator has uploaded the certificate to FortiMail. What additional step is required to ensure that the new certificate is used for inbound SMTP connections?

Create a new TLS policy for inbound connections that references the new certificate.

Restart the FortiMail services to apply the new certificate.

Assign the new certificate to the SMTP service in the certificate settings.

Update the DNS A record for 'mail.example.com' to point to the FortiMail gateway.

FortinetNSE 6 - FortiMail Administrator

Domain 2Objective 2

Configure Secure MTA Features NSE6-FORTIMAIL-ADMINISTRATOR Practice Questions (Page 4)

Part of the Email Flow and Authentication domain, which makes up ~19% of our current practice bank.

20questions here

4free pages

6concepts

Questions 16–20

16foundation · medium
Which FortiMail feature is used to control email routing and relay based on sender, recipient, or other criteria?
Select an answer first
17foundation · medium
Which FortiMail setting is used to identify the email gateway's hostname in SMTP EHLO/HELO responses and to present a trusted identity to peer mail servers?
Select an answer first
18application · medium
An organization's FortiMail gateway recently had its TLS certificate renewed. The administrator notices that some external partners are still receiving certificate warnings when connecting to the gateway. The certificate is valid and correctly assigned. What is the most likely cause of the warnings?
Select an answer first
19foundation · medium
Which FortiMail feature allows you to enforce TLS encryption for email sent to specific domains or received from specific senders?
Select an answer first
20application · medium
A FortiMail administrator is preparing to replace an expiring TLS certificate. The new certificate has been issued by a public CA and includes the hostname 'mail.example.com'. The administrator has uploaded the certificate to FortiMail. What additional step is required to ensure that the new certificate is used for inbound SMTP connections?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to NSE6-FORTIMAIL-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE6-FORTIMAIL-ADMINISTRATOR” is a trademark of its owner, used for identification only.

Configure Secure MTA Features NSE6-FORTIMAIL-ADMINISTRATOR Practice Questions (Page 4)

Questions 16–20

Which FortiMail feature is used to control email routing and relay based on sender, recipient, or other criteria?

Which FortiMail setting is used to identify the email gateway's hostname in SMTP EHLO/HELO responses and to present a trusted identity to peer mail servers?

Which FortiMail feature allows you to enforce TLS encryption for email sent to specific domains or received from specific senders?

Keep studying — Email Flow and Authentication