FORTINET-NSE56 Nse6 Fortimail Secure Email Gateway Practice Test 5 — 15 Questions

Question 1

How can you view the current number of emails in the quarantine?

Accepted Answer

On the dashboard.. The current number of emails in the quarantine can be viewed on the dashboard. FortiMail's dashboard provides a real-time summary of system status, including quarantine statistics such as the number of messages currently held. This is the quickest way to see quarantine counts without running reports or digging into logs.

Answer

By running a hardware diagnostic.

Answer

In the policy editor.

Answer

In the system logs.

Question 2

What is the primary role of the 'Administrator' profile?

Accepted Answer

To manage administrative access and permissions.. The Administrator profile in FortiMail defines what administrative users can see and do within the management interface — it controls role-based access, permission scopes, and which configuration areas an admin account may modify. It is the mechanism for delegating and restricting administrative privileges, not for handling mail processing functions.

Answer

To store quarantined emails.

Answer

To filter email content.

Answer

To configure mail routing.

Question 3

You are experiencing delays in mail delivery. Where is the best place to check for queued messages?

Accepted Answer

Mail Queue.. The Mail Queue in FortiMail displays messages that are pending delivery, whether inbound or outbound. It is the primary location to check for delays and to manage queued messages. The System dashboard provides overall status but not detailed queue contents. AntiSpam log and Routing policy are not where queued messages are listed.

Answer

System dashboard.

Answer

AntiSpam log.

Answer

Routing policy.

Question 4

Which feature is essential for protecting against password-based malware in attachments?

Accepted Answer

AV blocking of encrypted archives.. Password-protected (encrypted) archives are a common malware delivery vector because gateway AV engines cannot scan the contents without the password. Blocking encrypted archives at the AV layer prevents these files from reaching users, since the scanner cannot inspect their payloads. This is the essential control for password-based malware in attachments.

Answer

Sender reputation.

Answer

Bayesian filtering.

Answer

Access control rules.

Question 5

Which component manages the 'Daily Report' schedule?

Accepted Answer

Report settings.. The Daily Report schedule in FortiMail is managed under Report settings. This area lets administrators configure when reports are generated, what data they include, and who receives them. Report settings is the dedicated configuration section for all report-related scheduling and delivery parameters.

Answer

Access control rules.

Answer

Quarantine settings.

Answer

System logs.

Question 6

How can you ensure that only encrypted traffic is allowed for webmail access?

Accepted Answer

Enable HTTPS and redirect HTTP to HTTPS.. Enabling HTTPS and redirecting HTTP to HTTPS (A) ensures that all webmail sessions are encrypted in transit using TLS, and that users who type 'http://' are automatically upgraded to the secure channel. This is the standard method to enforce encrypted webmail access without disabling the service. It satisfies both confidentiality and availability requirements.

Answer

Use a VPN for all traffic.

Answer

Set the port to 25.

Answer

Disable the Webmail service.

Question 7

Which command allows you to verify if the FortiMail can reach a remote mail server on port 25?

Accepted Answer

telnet 25. The telnet command (D) allows you to test TCP connectivity to a specific port, such as port 25 for SMTP. By running 'telnet 25', you can verify if the remote mail server is reachable and accepting connections on that port. This is a standard network troubleshooting step.

Answer

ping <IP>

Answer

arp -a

Answer

traceroute <IP>

Question 8

What does the 'Heuristic' score measure in the AntiSpam engine?

Accepted Answer

The probability that the email content is spam.. The Heuristic score in FortiMail's AntiSpam engine is a computed probability (0–100) that a message's content exhibits spam-like characteristics, based on rules analyzing headers, body text, and structure. It is a content-based score, not a reputation or metadata metric. Administrators set thresholds to tag or quarantine messages above a given score.

Answer

The sender's reputation.

Answer

The attachment size.

Answer

The speed of the sender.

Question 9

Which of the following is a symptom of a full quarantine storage?

Accepted Answer

Inability to save new emails to the quarantine.. When quarantine storage is full, the system cannot write new messages to the quarantine database or disk, resulting in the inability to save new emails to quarantine. This is the direct and immediate symptom because the storage medium has reached capacity and rejects further writes. Other symptoms like slow delivery or increased spam are indirect and not definitive indicators of a full quarantine.

Answer

Slow email delivery.

Answer

Loss of admin access.

Answer

Increased spam.

Question 10

You need to ensure that the FortiMail doesn't relay spam to external addresses. Which feature should be configured?

Accepted Answer

Outbound AntiSpam and relay control.. To prevent FortiMail from relaying spam to external addresses, you configure Outbound AntiSpam together with relay control. Relay control defines who is allowed to relay mail through FortiMail (typically only authenticated/internal users), while outbound antispam scans mail leaving the organization so compromised accounts or internal spam cannot be relayed externally. Together they close the open-relay and outbound-spam paths.

Answer

Increase storage.

Answer

Inbound relay policy.

Answer

Disable DNS.

Question 11

What is the primary function of the 'Sender Reputation' service?

Accepted Answer

To block senders based on historical data.. Sender Reputation is a FortiGuard-hosted service that assigns a reputation score to sending IP addresses and domains based on historical behavior such as spam volume, complaint rates, and blocklist presence. FortiMail queries this service to block or flag messages from senders with poor reputations before content analysis even occurs. This provides an early, efficient layer of spam defense.

Answer

To filter based on subject lines.

Answer

To manage mailboxes.

Answer

To provide encryption.

Question 12

Where do you configure the expiration period for messages in the quarantine?

Accepted Answer

Quarantine maintenance settings.. The expiration period for quarantined messages in FortiMail is configured under Quarantine maintenance settings. This area controls how long messages remain in quarantine before being automatically deleted, along with other maintenance tasks like database cleanup. It is the correct location for setting quarantine retention policies.

Answer

Access rules.

Answer

System logs.

Answer

AntiSpam profile.

Question 13

Which GUI menu is primarily used for monitoring real-time activity?

Accepted Answer

Monitor.. The Monitor menu in FortiMail provides real-time visibility into system activity, including live mail logs, queue status, active sessions, and statistics dashboards. It is the designated GUI area for observing current operational state rather than configuring behavior.

Answer

Profile.

Answer

Policy.

Answer

System settings.

Question 14

How can you disable the 'Greylisting' feature for a specific, trusted sender?

Accepted Answer

Add them to the AntiSpam whitelist.. The AntiSpam whitelist in FortiGate's email filter (AntiSpam) profile is the mechanism that exempts specific senders, domains, or IP addresses from spam inspection entirely, which includes bypassing greylisting. Adding a trusted sender to the whitelist means FortiGate will not apply the greylisting delay (SMTP 4xx temporary rejection) to that sender's mail. This is the intended administrative control for trusted senders who should never be delayed or quarantined.

Answer

Increase the greylisting timer.

Answer

Delete their account.

Answer

Change their IP.

Question 15

Which of these is a benefit of 'Transparent' mode?

Accepted Answer

It requires no changes to mail server settings.. In Transparent mode, the FortiMail unit is inserted into the existing network path without requiring any changes to the IP addresses or configurations of the mail servers behind it. It acts as a Layer 2 bridge, so the mail server's default gateway remains the same and no MX record or relay settings need to be modified. This makes deployment simple and non-disruptive, which is the primary benefit of Transparent mode.

Answer

It is faster than Gateway mode.

Answer

It supports only one domain.

Answer

It hides the mail server IP.