01. Which three statements about how FortiMail behaves in server mode versus transparent mode are correct?
(Choose three.)
a) In transparent mode, FortiMail hosts user mailboxes and provides webmail access
b) Both modes apply FortiMail's antispam and antivirus filtering to messages
c) In transparent mode, the existing mail server keeps its role and clients are not required to use FortiMail as their outgoing SMTP server
d) In server mode, FortiMail cannot perform any content or antivirus scanning
e) In server mode, FortiMail acts as the mail server and hosts local user mailboxes
02. A project lead wants a concise explanation of transparent mode for non-technical stakeholders. Which answer is best?
a) Transparent mode turns FortiMail into the only user mailbox server
b) Transparent mode requires re-pointing the domain's MX records to FortiMail while leaving the existing server to host user mailboxes
c) Transparent mode automatically encrypts every message with IBE before delivery and stores a copy in the secure portal
d) Transparent mode lets FortiMail inspect and protect mail while the protected SMTP server remains the server clients use
03. Which statement describes the heuristics antispam technique?
a) It analyzes email using characteristics of known spam samples recently caught by FortiMail.
b) It analyzes characteristics of images using depth of color, grey level, space, and color change.
c) The header and body of email messages are scanned against a set of PCRE rules.
d) URIs in the email message body are extracted and sent to third-party rating servers.
04. A team is deciding whether to change client mail-server settings during rollout. Which design question best helps distinguish the two deployment styles in this area?
a) Will HA heartbeat traffic use a dedicated VLAN, or will it share the existing management interface?
b) Will the antispam profile use sender reputation or greylisting?
c) Will DKIM signing be enabled for outbound mail, or will DMARC alignment be enforced at the gateway for every domain?
d) Will clients submit mail directly to FortiMail, or will they continue sending through the protected SMTP server?
05. Which statement correctly distinguishes transparent mode from gateway mode in FortiMail?
a) Transparent mode hosts user mailboxes locally, while gateway mode provides webmail and POP3/IMAP access to users.
b) Transparent mode is inserted inline without changing MX records, while gateway mode requires MX to point to FortiMail.
c) Gateway mode is deployed inline as a bridge, while transparent mode re-points MX.
d) Both modes require FortiMail to replace the existing mail server, taking over mailbox hosting and delivery for the domain.
06. Why can FortiMail IBE deliver secure mail to an external recipient who has no certificate, unlike S/MIME?
a) IBE uses the recipient's email address as the identity and delivers through a secure portal, requiring no prior key exchange
b) IBE encrypts only the subject line, so no key is needed
c) IBE requires the recipient to exchange a public key in advance and register that certificate with the sender, so no portal is needed
d) IBE silently installs an S/MIME certificate on the recipient's device and provisions a matching private key, requiring no portal
07. Which two back-end server types can a FortiMail authentication profile use to validate SMTP users?
(Choose two.)
a) LDAP
b) DNS
c) RADIUS
d) SNMP
08. What are two benefits of enabling authentication reputation tracking on FortiMail?
(Choose two.)
a) Enforces SMTP authentication
b) Tracks offending IP addresses attempting brute force attacks
c) Detects spoofed SMTP header addresses
d) Temporarily locks out an attacker
09. An architect is comparing two rollout plans. One reconfigures clients to point to FortiMail; the other keeps client submission pointed at the protected SMTP server.
Which statement is most accurate?
a) Both plans describe transparent mode, and neither one changes the existing mail server's role
b) Neither plan is related to a FortiMail deployment mode, and both are purely DNS changes
c) The first plan aligns with server mode, and the second aligns with transparent mode
d) Both plans describe server mode, and both make FortiMail the organization's own mail server
10. Which two statements describe the push delivery method used by IBE?
(Choose two.)
a) FortiMail encrypts the email and adds it to a notification email as an HTML attachment.
b) The recipient accesses the HTTPS link and logs in to the FortiMail secure message portal.
c) FortiMail generates a notification email message with an embedded HTTPS URL.
d) Decrypted email is displayed using the HTTPS webmail interface.