Be able to deploy FortiMail in Gateway or Transparent Mode, expose Webmail correctly, and confirm SMTP reachability with CLI diagnostics. The single most important thing: match each mode's network prerequisites and verify service ports, not just host reachability.
Start practicing
Nse6 Fortimail Secure Email Gateway — choose a session length
Free · No account required
Domain overview
This domain covers FortiMail Secure Email Gateway deployment and administration: mail routing, access control, and troubleshooting. Questions test transparent versus gateway mode, system and mail settings, and verifying connectivity with FortiMail diagnostic commands such as execute ping and execute telnet. Expect scenario items on Webmail exposure, protocol support, and the network prerequisites each mode imposes.
Exam objectives
Verifying SMTP reachability to remote servers using FortiMail CLI diagnostics like execute telnet on port 25
Configuring Webmail access for external users, including listener/interface and access-control settings
Identifying mandatory network requirements for Transparent Mode, such as correct gateway and routing placement
Knowing which mail retrieval protocols FortiMail supports, including POP3, IMAP, and their secure variants
Assuming any interface can serve Webmail without enabling the service and permitting the source subnet in access control
Confusing Transparent Mode prerequisites with Gateway Mode, especially default gateway and IP assignment expectations
Testing mail flow with ping alone instead of a port-specific check such as telnet to port 25
Click any question to see the full explanation and answer options, or start a focused practice session above.
An administrator wants to prevent email spoofing by verifying the sender's domain. Which policy should be configured to check the DNS TXT record of the sending domain?
2You are configuring DKIM signing on FortiMail. The administrator has generated the public/private key pair. Where must the public key be published to ensure the receiving MTA validates the email correctly?
3You are deploying FortiMail in Transparent mode. Which configuration step is mandatory to ensure traffic is inspected without modifying the IP headers of the email packets?
4Which TWO actions can be performed on items currently residing in the FortiMail global quarantine?
5You are deploying FortiMail in Transparent Mode. Which network configuration requirement is mandatory for this deployment?
6When using FortiMail in Server Mode, how does the appliance handle incoming mail?
7What is the primary function of the FortiMail 'Quarantine' feature?
8You are configuring DLP to block emails containing credit card numbers. Which component must be configured to define the pattern matching for the card numbers?
9An administrator needs to enforce DMARC 'reject' policy for incoming mail. Where is this enforced in FortiMail?
10Which feature allows FortiMail to perform automatic cleanup of old messages in the quarantine?
11In Gateway mode, what is the default behavior when FortiMail receives an email for an unknown recipient?
12Which DNS record must be published in the public DNS to enable DKIM signing for outgoing mail?
13Which THREE items are checked by the AntiSpam profile during email processing?
14Which TWO methods can be used to authenticate users for access to the FortiMail quarantine portal?
15Which TWO of the following are components of the FortiMail AntiSpam framework?
16Which TWO features in FortiMail help prevent email spoofing?
17Which THREE settings are required for successful DKIM signing on outgoing mail?
18Which TWO actions occur during the FortiMail inspection process before an email is delivered?
19What is the primary benefit of deploying FortiMail in a cluster?
20When configuring a Recipient Policy, what does the 'Action' field determine?
21An administrator wants to ensure that all outgoing emails are archived to a secondary server. Where is this configured?
22Which protocol is used for communication between the FortiMail and a remote LDAP server for user authentication?
23What is the purpose of the 'Session Limit' setting in an Access Control Rule?
24Which interface mode is best suited for high-availability setups where you need to minimize configuration changes on existing infrastructure?
25When an email is encrypted using FortiMail's Identity-Based Encryption (IBE), what does the recipient receive?
26What is the primary difference between a Gateway and a Server mode deployment?
27You notice that the FortiMail system time is incorrect, causing issues with SSL/TLS certificate validation. How do you correct this?
28Which of these is a legitimate reason to place a sender on the 'Block' list in the AntiSpam profile?
29What is the main advantage of using the FortiMail 'Quarantine' portal for end-users?
30How does FortiMail identify the policy to apply to an incoming email?
31What is the default port for SMTP communication?
32In which configuration area are 'Content Profiles' created and modified?
33Which type of scan should be enabled to detect known malware in email attachments?
34What is the purpose of the 'Relay Host' setting in FortiMail?
35How can you restrict management access to the FortiMail GUI to only specific IP addresses?
36Where do you check the current status of the FortiMail services?
37Which FortiMail feature helps to prevent 'backscatter' when dealing with spam?
38Which TWO settings are configurable in a 'Recipient Policy'?
39What is the benefit of using 'FortiGuard' services with FortiMail?
40Which THREE actions are available in the 'DLP' section of a policy?
41Which TWO of the following protocols does FortiMail support for mail retrieval?
42What happens if a message matches multiple policies?
43How can you view the current number of emails in the quarantine?
44What is the primary role of the 'Administrator' profile?
45You are experiencing delays in mail delivery. Where is the best place to check for queued messages?
46Which feature is essential for protecting against password-based malware in attachments?
47Which component manages the 'Daily Report' schedule?
48How can you ensure that only encrypted traffic is allowed for webmail access?
49Which command allows you to verify if the FortiMail can reach a remote mail server on port 25?
50What does the 'Heuristic' score measure in the AntiSpam engine?
51Which of the following is a symptom of a full quarantine storage?
52You need to ensure that the FortiMail doesn't relay spam to external addresses. Which feature should be configured?
53What is the primary function of the 'Sender Reputation' service?
54Where do you configure the expiration period for messages in the quarantine?
55Which GUI menu is primarily used for monitoring real-time activity?
56How can you disable the 'Greylisting' feature for a specific, trusted sender?
57Which of these is a benefit of 'Transparent' mode?
58What is the purpose of the 'License' section in the FortiMail menu?
59Which configuration file format is used for importing user lists?
60Which protocol is most secure for retrieving email from the FortiMail server?
61What is the primary function of the 'AntiSpam' profile?
62Which configuration is required to allow external users to access the Webmail portal?
63A FortiMail appliance is deployed in gateway mode as an outbound relay for an internal application server. The application sends notification emails to external customers using the envelope sender notifications@corp.example.com, but the messages are being rejected by several recipient mail servers with SPF failures. The network team confirms the FortiMail's public IP is 203.0.113.45, and the SPF record for corp.example.com is 'v=spf1 mx -all'. The MX record for corp.example.com points to 198.51.100.20, which is the inbound FortiMail cluster. Which FortiMail configuration change will resolve the SPF failures for outbound mail sent through this relay?
64A network security analyst is troubleshooting why certain inbound emails are being marked as spam by FortiMail even though they originate from a trusted partner's domain. The partner's domain has a valid SPF record, but the emails are failing the 'Domain-based Message Authentication, Reporting, and Conformance' (DMARC) check. The analyst confirms that the partner's emails are being forwarded by a third-party mailing list. What is the most likely reason for the DMARC failure?
Be able to deploy FortiMail in Gateway or Transparent Mode, expose Webmail correctly, and confirm SMTP reachability with CLI diagnostics. The single most important thing: match each mode's network prerequisites and verify service ports, not just host reachability.
The Courseiva FORTINET-NSE56 question bank contains 64 questions in the Nse6 Fortimail Secure Email Gateway domain. Click any question to see the full explanation and answer breakdown.
Start with a 10-question focused session to identify your baseline accuracy in this domain. Read every explanation — even for questions you answer correctly — to understand the reasoning. Once you score consistently above 80%, move to a 20–30 question session to confirm depth before moving to the next domain.
Yes — the session launcher on this page draws questions exclusively from the Nse6 Fortimail Secure Email Gateway domain. Choose 10, 20, 30, or 50 questions for a focused session, or click individual questions to review them one by one.
Save your results, see per-domain analytics, and get readiness scores — free, for every certification.
Sign Up FreeFree forever · Every certification included