Enable and Match Authentication on FortiMail NSE6-FORTIMAIL-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A company is using FortiMail as a gateway for a domain that has a large number of users. The administrator wants to enforce SMTP authentication, but is concerned about the performance impact of querying the LDAP server for every authentication attempt. What is the recommended way to reduce the load on the LDAP server while still enforcing authentication?

   • AUse a local user database instead of LDAP.
   • BDisable SMTP authentication for internal IPs.
   • CEnable LDAP caching in FortiMail to store successful authentication results for a configurable period.
   • DIncrease the LDAP server's connection pool size.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   How does FortiMail determine which authentication policy applies to an incoming SMTP session?

   • ABy the content of the email message
   • BBy the destination email address
   • CBy the source IP address and the authentication method used
   • DBy the time of day the session is initiated
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A FortiMail administrator wants to ensure that when a user fails SMTP authentication, the gateway does not reveal whether the username or the password was incorrect. What is the correct way to configure this?

   • ADisable the 'Detailed authentication failure' option in the authentication policy.
   • BEnable the 'Suppress authentication errors' option in the SMTP settings.
   • CConfigure the authentication server to return a generic error message.
   • DEnable the 'Generic authentication failure' option in the authentication policy.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   During an SMTP session, when does FortiMail typically verify the sender's credentials?

   • AAfter the MAIL FROM command is received
   • BAfter the client issues the AUTH command
   • CAfter the RCPT TO command is received
   • DAfter the message data is fully transmitted
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   When a user submits SMTP credentials that do not match any configured account, what does FortiMail typically do?

   • ASilently accepts the credentials and logs the event
   • BRejects the authentication attempt with an error response
   • CAccepts the message but marks it as spam
   • DTemporarily blocks the client's IP address
   Reveal Solution Discussion Select an answer first