NSE7 Advanced Threat Protection Practice Question
An administrator is configuring FortiMail to improve email security. Which three of the following features are part of FortiMail's advanced threat protection? (Choose three.)
⚠ Common exam trap
Candidates often confuse FortiGate's UTM features (Web Filtering, Application Control) with FortiMail's specialized email security features, leading them to select options that are not part of FortiMail's advanced threat protection.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Email Authentication (SPF, DKIM, DMARC)
Email Authentication (SPF, DKIM, DMARC) is part of FortiMail's advanced threat protection because it verifies sender identity and prevents email spoofing and phishing. SPF checks the sending server's IP against authorized records, DKIM uses cryptographic signatures to ensure message integrity, and DMARC provides policy enforcement for alignment. These mechanisms collectively reduce the risk of domain impersonation and are integral to FortiMail's anti-phishing capabilities.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Web Filtering
Why it's wrong here
Web filtering is not part of FortiMail's email security.
- ✗
Application Control
Why it's wrong here
Application control is a FortiGate feature, not FortiMail.
- ✓
Email Authentication (SPF, DKIM, DMARC)
Why this is correct
FortiMail supports email authentication protocols.
- ✓
Content Disarm and Reconstruction (CDR)
Why this is correct
CDR sanitizes attachments.
- ✓
Sandboxing (integration with FortiSandbox)
Why this is correct
FortiMail can submit attachments to sandbox for analysis.
Go deeper
Related to this question
About these practice questions
Courseiva writes every NSE7 question from scratch — 940 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.