Enable and Match Authentication on FortiMail NSE6-FORTIMAIL-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company is migrating from an on-premises mail server to Microsoft 365. They use FortiMail as a gateway. During the migration, some users are still on the on-premises server and some are in Microsoft 365. The administrator wants to enforce SMTP authentication for all users, but the authentication source differs: on-premises users are in Active Directory, and cloud users are in Microsoft Entra ID. What is the best way to configure FortiMail to authenticate both groups?

   • AConfigure a single LDAP server pointing to the on-premises Active Directory, and use a synchronization tool to copy cloud users to the local directory.
   • BUse a single LDAP server pointing to Microsoft Entra ID, and configure on-premises users to authenticate against the cloud directory.
   • CConfigure two separate authentication servers (LDAP for on-premises and LDAP for Microsoft Entra ID) and create authentication policies that reference the appropriate server based on the sender's domain.
   • DDisable SMTP authentication for the cloud domain and rely on IP-based restrictions.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company uses FortiMail as a gateway. They have a group of users who are external contractors and do not have accounts in the company's Active Directory. The administrator wants to allow these contractors to send email through the gateway using SMTP authentication. What is the recommended way to create accounts for these contractors?

   • ACreate a single shared account for all contractors.
   • BAdd the contractors to the Active Directory and use LDAP authentication.
   • CDisable SMTP authentication for the contractors' IP addresses.
   • DCreate local user accounts in FortiMail for each contractor.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An organization uses FortiMail as a relay for a legacy application that sends emails with a 'From' address that does not match any configured user account. The application currently sends without authentication, but the security team wants to enforce SMTP authentication for all relayed mail. What is the recommended way to allow this legacy application to continue sending while meeting the new security requirement?

   • ADisable SMTP authentication for the relay listener and rely on IP-based restrictions.
   • BCreate a user account for the application and configure the application to authenticate with that account.
   • CConfigure the authentication policy to accept any sender that matches the application's IP address.
   • DUse a per-recipient policy to skip authentication for messages from the application.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A large enterprise uses FortiMail in gateway mode. They have two domains: example.com (hosted on-premises) and example.org (hosted in Microsoft 365). The security team wants to enforce SMTP authentication for both domains, but they have a constraint: users of example.org must authenticate against Microsoft Entra ID, while users of example.com must authenticate against the on-premises Active Directory. The administrator has configured two LDAP servers in FortiMail. What is the correct way to ensure that authentication attempts are routed to the correct LDAP server?

   • AConfigure the LDAP servers in a failover group, and let FortiMail use the first one that responds.
   • BCreate a single authentication policy that references both LDAP servers, and let FortiMail try them in order.
   • CCreate two authentication policies, each referencing the appropriate LDAP server, and configure the policies to match the sender's domain.
   • DUse a single LDAP server that proxies to both directories.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the primary purpose of SMTP authentication in an email system?

   • ATo verify the identity of the sender before accepting the message
   • BTo encrypt the email content during transmission
   • CTo filter spam and malware from incoming messages
   • DTo route the email to the correct destination server
   Reveal Solution Discussion Select an answer first