Achieve the FCP_FML_AD-7.4 Exam Best Results with Help from Fortinet Certified Experts [Q21-Q36]

Rate this post

Achieve the FCP_FML_AD-7.4 Exam Best Results with Help from Fortinet Certified Experts

Provide FCP_FML_AD-7.4 Practice Test Engine for Preparation

Fortinet FCP_FML_AD-7.4 Exam Syllabus Topics:

Section	Weight	Objectives
Topic 1: Monitoring, High Availability and Troubleshooting	20%	– Webmail and additional features – High Availability (HA) setup – Logging, reports and dashboards – Mail flow troubleshooting
Topic 2: Email Security Inspection	25%	– Antivirus and FortiSandbox integration – Data Loss Prevention (DLP) – Content filtering and profiles – FortiGuard Antispam and filtering
Topic 3: Email Flow and Authentication	20%	– SMTP routing and delivery control – LDAP and directory integration – Sender authentication: SPF, DKIM, DMARC – Session, IP and recipient policies
Topic 4: Encryption and Compliance	15%	– TLS encryption configuration – IBE and secure messaging – Archiving and retention policies
Topic 5: System Configuration and Deployment	20%	– Initial setup and protected domains – System maintenance and backup – Mail flow architecture and queues – Deployment modes: Gateway, Server, Transparent

NO.21 In which two ways does a transparent mode FortiMail use the build-it MTA to process email?
(Choose two.)

The built-in MTA must connect to an external relay host to deliver email.

It ignores the destination set by the sender and uses its own MX record lookup.

MUAs must be configured to connect to the built-in MTAto send email.

It can queue undeliverable messages and generate DSNs.

It ignores the destination set by the sender and uses its own MX record lookup.
In transparent mode FortiMail intercepts mail and then its built-in MTA performs an MX lookup on the recipient domain rather than trusting the original destination hop.
It can queue undeliverable messages and generate DSNs.
The built-in MTA maintains delivery queues and produces Delivery Status Notifications when downstream delivery fails.

NO.22 Which license must you apply to a FortiMail device to enable the HA centralized monitoring features?

Office 365 protection license

Enterprise license

Advanced Management and MSSP license

Cloud gateway license

The HA Centralized Monitor feature is only available when the Advanced Management & MSSP license is applied to the FortiMail unit.

NO.23 Refer to the exhibit, which shows the output of an email transmission using a telnet session.

What are two correct observations about this SMTP session? (Choose two.)

The SMTP envelope addresses are different from the message header addresses.

The “Subject” is part of the message header.

The”220 mx. internal, lab ESMTPSmtpd” message is part of the SMTP banner.

The “250Message accepted for delivery” message is part ofthe message body.

NO.24 Refer to the exhibit, which displays the Mail Settings page of a FortiMail device running in gateway mode.

In addition to selecting Check External Domain in the MTA-STS service field, what else must an administrator do to enable MTA-STS?

Enable MTA-STS action in the appropriate inbound recipient policy.

Enable secure authentication in the associated SMTP authentication profile.

Enable MTA-STS in the associated TLS profile.

Enable SMTPUTF8 support in the mail server settings.

You must enable MTA-STS in whatever TLS profile your outbound IP policy uses-only then will FortiMail honor the “Check External Domain” setting.

NO.25 Which two features are available when you enable HA centralized monitoring on FortiMail? (Choose two.)

Policy configuration changes of all cluster members from the primary device.

Mail statistics of all cluster members on the primary device.

Cross-device log searches across all cluster members from the primary device.

Firmware update of all cluster members from the primary device

NO.26 Refer to the exhibit, which displays an access control rule. What are two expected behaviors for this access control rule? (Choose two.)

Senders must be authenticated to match this rule.

Emails must be sent from the 10.0.1.0/24subnet.

Email matching this rule will be relayed.

Email must originate from an example.comemail address.

Email matching this rule will be relayed.
The rule’s Action is set to Relay, so any message that matches the rule is forwarded onward.
Email must originate from an example.com email address.
The Sender field is “*@example.com,” so only envelopes with a MAIL FROM in that domain match.

NO.27 Which FortiMail feature combats spammers who try to hide spam content in delivery status notifications (DSN) messages?

Bounce address tag validation (BATV)

Header analysis

Heuristic

Behavior analysis

BATV verifies the validity of bounce messages and prevents attackers from embedding spam content inside fake DSN messages.

NO.28 Refer to the exhibit, which shows the mail server settings of a FortiMail device:

What are two ways this FortiMail device will handle connections? (Choose two.)

FortiMail will drop any inbound plaintext SMTP connection.

FortiMail will accept SMTPS connections.

FortiMail will enforce SMTPS on all outbound sessions.

FortiMail will support the STARTTLS extension.

FortiMail will accept SMTPS connections.
The SMTPS port (465) is enabled and “SMTPS” authentication is turned on, so it will listen for and accept implicit-SSL SMTP on port 465.
FortiMail will support the STARTTLS extension.
With “SMTP over SSL/TLS” enabled on port 25, the server advertises and accepts STARTTLS for opportunistic TLS upgrades on plaintext SMTP sessions.

NO.29 Refer to the exhibit, which shows an nslookup output of MX records of the example.com domain.

Which two MTA selection behaviors for the example.com domain are correct? (Choose two.)

mx.example.com will receive approximately twice the number of email as mx.hosted.com because of its preference value.

The primary MTA for the example.com domain is mx.hosted.com.

The external MTAs will send email to mx.example.com only if mx.hosted.com is unreachable.

The PriNS server should receive all email for the example.com domain.

NO.30 Which item is a supported one-time secure token for IBE authentication?

FortiToken

Certificate

SMS

Security question

NO.31 While reviewing logs, an administrator discovers that an incoming email was processed using policy IDs 0:4:9:INTERNAL.
Which two statements describe what this policy ID means? (Choose two.)

Access control policy number 9 was used.

The FortiMail configuration is missing an access delivery rule.

The email was processed using IP-based policy ID 4.

FortiMail is applying the default behavior for relaying inbound email.

NO.32

Refer to the exhibits, which show a topology diagram (Topology) and a configuration element (IP Policy).
An administrator has enabled the sender reputation feature in the Example_Session profile on FML-1. After a few hours, the deferred queue on the mail server starts filling up with undeliverable email.
Which two changes must theadministrator make to fix this issue? (Choose two.)

Disable the exclusive flag in IP policy ID 1.

Apply a session profile with sender reputation disabled on a separate IP policy for outbound sessions.

Clear the sender reputation database using the CLI.

Create an outbound recipient policy to bypass outbound email from session profile inspections.

NO.33 In which two ways does a transparent mode FortiMail use the build-it MTA to process email? (Choose two.)

It can queue undeliverable messages and generate DSNs.

The built-in MTA must connect to an external relay host to deliver email.

MUAs must be configured to connect to the built-in MTA to send email.

It ignores the destination set by the sender and uses its own MX record lookup.

NO.34 A FortiMail is configured with the protected domain example.com.
On this FortiMail, which two envelope addresses are considered incoming? (Choose two.)

MAIL FROM: [email protected] RCPT TO: [email protected]

NO.35 Refer to the exhibits showing SMTP limits (Session Profile – SMTP Limits), and domain settings (Domain Settings, andDomain Settings – Other) of a FortiMail device.

Which message size limit in KB will the FortiMail apply to outbound email?

204300

There is no message size limit for outbound email from a protected domain.

10240

51200

NO.36 Refer to the exhibit which displays a topology diagram.

Which two statements describe the built-in bridge functionality on a transparent mode FortiMail? (Choose two.)