Refer to the exhibit.

Which configuration change must you make to block an offending IP address temporarily?

A. Add the offending IP address to the system block list

B. Add the offending IP address to the user block list

C. Add the offending IP address to the domain block list

D. Change the authentication reputation setting status to Enable

An administrator sees that an excessive amount of storage space on a FortiMail device is being used up by quarantine accounts for invalid users. The FortiMail is operating in transparent mode.

Which two FortiMail features can the administrator configure to tackle this issue? (Choose two.)

A. Automatic removal of quarantine accounts

B. Recipient address verification

C. Bounce address tag verification

D. Sender address rate control

FortiMail is configured with the protected domain example.com.

Which two envelope addresses will require an access receive rule, to relay for unauthenticated senders? (Choose two.)

A. MAIL FROM: [email protected] RCPT TO: [email protected]

B. MAIL FROM: [email protected] RCPT TO: [email protected]

C. MAIL FROM: [email protected] RCPT TO: [email protected]

D. MAIL FROM: [email protected] RCPT TO: [email protected]

Which three statements about SMTPS and SMTP over TLS are true? (Choose three.)

A. SMTP over TLS connections are entirely encrypted and initiated on port 465

B. SMTPS encrypts the identities of both the sender and receiver

C. The STARTTLS command is used to initiate SMTP over TLS

D. SMTPS encrypts only the body of the email message

E. SMTPS connections are initiated on port 465

Refer to the exhibit.

Which two statements about the access receive rule are true? (Choose two.)

A. Email matching this rule will be relayed

B. Email must originate from an example.com email address to match this rule

C. Senders must be authenticated to match this rule

D. Email from any host in the 10.0.1.0/24 subnet can match this rule

Which firmware upgrade method for an active-passive HA cluster ensures service outage is minimal, and there are no unnecessary failovers?

A. Break the cluster, upgrade the units independently, and then form the cluster

B. Upgrade both units at the same time

C. Upgrade the standby unit, and then upgrade the active unit

D. Upgrade the active unit, which will upgrade the standby unit automatically

Refer to the exhibit.

It is recommended that you configure which three access receive settings to allow outbound email from the example.com domain on FML-1? (Choose three.)

A. The Sender pattern should be set to *@example.com

B. The Action should be set to Relay

C. The Recipient pattern should be set to 10.29.1.45/24

D. The Enable check box should be cleared

E. The Sender IP/netmask should be set to 10.29.1.45/32

A FortiMail administrator is investigating a sudden increase in DSNs being delivered to the protected domain for undeliverable email messages. After searching the logs, the administrator identifies that the DSNs were not generated as a result of any outbound email sent from the protected domain.

Which FortiMail antispam technique can the administrator use to prevent this scenario?

A. Spam outbreak protection

B. Bounce address tag validation

C. Spoofed header detection

D. FortiGuard IP Reputation

Refer to the exhibit.

The exhibit shows a FortiMail active-passive setup.

Which three actions are recommended when configuring the primary FortiMail HA interface? (Choose three.)

A. Disable Enable port monitor

B. In the Heartbeat status drop-down list, select Primary

C. In the Peer IP address field, type 172.16.32.57

D. In the Virtual IP action drop-down list, select Use

E. In the Virtual IP address field, type 172.16.32.55/24

An organization has different groups of users with different needs in email functionality, such as address book access, mobile device access, email retention periods, and disk quotas.

Which FortiMail feature specific to server mode can be used to accomplish this?

A. Resource profiles

B. Domain-level service settings

C. Access profiles

D. Address book management options