NSE7 Advanced Threat Protection Practice Question
Which TWO email authentication mechanisms does FortiMail support to verify sender identity and reduce spoofing? (Choose two.)
⚠ Common exam trap
Test-takers frequently confuse DMARC as an authentication mechanism rather than a policy framework that relies on SPF and DKIM results, and they may also mistake STARTTLS or S/MIME for sender verification when they are actually transport or message security protocols.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
SPF (Sender Policy Framework)
FortiMail supports SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail) as email authentication mechanisms to verify sender identity and reduce spoofing. SPF allows the domain owner to publish authorized sending IP addresses in DNS TXT records, while DKIM uses a digital signature added to the email header, verified against a public key in the sender's DNS. Both are core components of email authentication that FortiMail can enforce or validate.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
DMARC (Domain-based Message Authentication, Reporting & Conformance)
Why it's wrong here
DMARC is a policy, not an authentication mechanism.
- ✓
SPF (Sender Policy Framework)
Why this is correct
Checks if the sending IP is authorized.
- ✗
STARTTLS
Why it's wrong here
Encryption protocol, not authentication.
- ✗
S/MIME
Why it's wrong here
End-to-end encryption, not sender authentication at the domain level.
- ✓
DKIM (DomainKeys Identified Mail)
Why this is correct
Verifies the email signature.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every NSE7 question from scratch — 940 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.