Configure Traditional SMTP Encryption Methods NSE6-FORTIMAIL-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A manufacturing company uses FortiMail and needs to send a signed and encrypted email to a customer. The customer has provided their S/MIME certificate. The administrator has imported the certificate into FortiMail. What else must be configured to ensure the outgoing message is both signed and encrypted?

   • ACreate a content filter rule that applies S/MIME signing and encryption to messages addressed to the customer's domain.
   • BConfigure the customer's domain as a 'Trusted' domain in the LDAP profile.
   • CSet the 'S/MIME' option in the SMTP policy to 'Encrypt only'.
   • DEnable 'Required TLS' in the SMTP policy for the customer's domain.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In FortiMail, what is required to configure S/MIME encryption for a user's outgoing messages?

   • AThe sender's private key must be stored in FortiMail's keystore
   • BThe recipient's public key certificate must be available to FortiMail
   • CThe recipient's mail server must support STARTTLS
   • DA TLS profile must be configured for the SMTP session
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company uses FortiMail and needs to ensure that all inbound email from a specific partner is received over an encrypted TLS session. The partner's mail server supports STARTTLS. What should the administrator configure on FortiMail?

   • ACreate an inbound SMTP policy for the partner's IP address with 'TLS' set to 'Required'.
   • BEnable 'Opportunistic TLS' in the global SMTP settings.
   • CConfigure the partner's domain as a 'Relay' in the SMTP settings.
   • DCreate an outbound SMTP policy for the partner's domain with 'TLS' set to 'Required'.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   In FortiMail, which configuration setting enables opportunistic TLS for outbound SMTP sessions?

   • ASelect 'StartTLS' in the SMTP server's authentication settings
   • BEnable the 'S/MIME signing' option in the recipient policy
   • CConfigure the SMTP policy to use 'SSL/TLS' as the transport protocol
   • DSet the TLS profile to 'Opportunistic' and apply it to the outbound SMTP policy
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An administrator is configuring FortiMail to send email to a partner that requires TLS. The partner's mail server uses a certificate signed by a private CA. The administrator has imported the CA certificate into FortiMail's trusted CA store. What else must be configured to ensure the TLS handshake succeeds?

   • AEnable 'Required TLS' in the SMTP policy for the partner's domain.
   • BSet the SMTP policy to use 'Opportunistic TLS'.
   • CDisable certificate validation for the partner's domain in the SMTP policy.
   • DConfigure the partner's server as a 'Relay' in the SMTP settings.
   Reveal Solution Discussion Select an answer first