Deploy FortiMail in Transparent Mode NSE6-FORTIMAIL-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   An organization has FortiMail in transparent mode between their firewall and mail server. They want to ensure that all incoming SMTP connections are subject to antivirus scanning. What must be configured on FortiMail to achieve this?

   • AEnable the SMTP proxy and apply a security policy that includes antivirus scanning.
   • BCreate a firewall rule on the FortiMail to allow SMTP traffic.
   • CConfigure the mail server to relay all incoming mail through FortiMail.
   • DSet the FortiMail to operate in transparent mode with NAT enabled.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   An administrator has deployed FortiMail in transparent mode between the company's edge router and internal mail server. They notice that SMTP sessions from external senders are being intercepted and relayed by FortiMail. What is the primary reason FortiMail is able to intercept these sessions even though it is not the destination IP address?

   • AFortiMail uses ARP spoofing to redirect traffic destined for the mail server.
   • BFortiMail is configured with a virtual IP (VIP) that matches the mail server's public IP.
   • CThe mail server's DNS MX record points to FortiMail's IP address.
   • DFortiMail is configured as a transparent proxy that intercepts SMTP traffic at the application layer.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company is deploying FortiMail in transparent mode in front of their existing mail server. The network administrator wants to avoid changing the mail server's IP address and default gateway. Which configuration step is essential for the FortiMail device to operate correctly in this deployment?

   • ADisable the FortiMail firewall and configure it as a simple network tap.
   • BConfigure the FortiMail interfaces in bridge mode and assign an IP address to a separate management interface.
   • CAssign the mail server's IP address to the FortiMail interface and enable proxy ARP.
   • DSet the FortiMail to operate as a router and change the mail server's default gateway to point to FortiMail.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A small business wants to deploy FortiMail in transparent mode to protect their mail server. They have a single public IP address and their mail server uses a private IP address. The network is behind a NAT router. Which deployment parameter is critical for FortiMail to receive and process email correctly?

   • ASet the FortiMail bridge interfaces to use the same subnet as the mail server.
   • BConfigure the FortiMail management interface with a public IP address.
   • CAssign the mail server's IP address to the FortiMail bridge interface.
   • DEnable NAT on the FortiMail bridge interfaces.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An administrator notices that FortiMail in transparent mode is not blocking spam messages even though the anti-spam feature is enabled. The mail flow is: internet → FortiMail → mail server. What is the most likely cause?

   • AThe anti-spam feature requires a separate license that has not been activated.
   • BThe mail server is using implicit TLS, which prevents FortiMail from inspecting messages.
   • CThe anti-spam profile is not applied to the SMTP proxy policy.
   • DThe FortiMail bridge interfaces are not in the same subnet as the mail server.
   Reveal Solution Discussion Select an answer first