File Info
| Exam | Fortinet Certified Email Security Professional |
| Number | FCESP |
| File Name | Fortinet.FCESP.PracticeTest.2018-07-31.40q.vcex |
| Size | 1 MB |
| Posted | Jul 31, 2018 |
| Download | Fortinet.FCESP.PracticeTest.2018-07-31.40q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
On a FortiMail unit, access control rules specify actions to be taken against matching email messages. Which of the following statements correctly describes the Bypass action?
- Accept the email message but skip the MX record lookup. This mail message will be delivered using the configured relay server.
- Do not deliver the email message.
- Accept the email message and skip all message scanning, such as antispam and antivirus.
- Accept the email message and delete it immediately without delivery.
Correct answer: C
Question 2
Two access control rules are configured on a FortiMail unit as illustrated in the exhibit.
Which of the following statements correctly describes the COMBINED action of these two access control rules?
- Email messages from senders at external1.lab will be rejected.
- Email messages from external1.lab to internal1.lab from host IP 172.16.78.8 are relayed.
- Email messages from external1.lab to internal1.lab from any host IP address are relayed.
- Email messages from external1.lab to internal1.lab are restricted by the return DNS pattern.
Correct answer: B
Question 3
What is the best explanation for why a FortiMail unit would issue the error message indicated in the exhibit?
- The recipient domain external1.lab is not defined.
- This traffic comes from an authenticated sender.
- Recipient verification is not working properly.
- The session is matching an Access Control Rule with action "Reject".
Correct answer: A
Question 4
Which of the following FortiMail profile types apply to IP-based policies only?
- Session profile
- Content profile
- IP pool
- Antispam profile
Correct answer: AC
Question 5
According to the Message Header printed below, which antispam technique detected this email as spam:
Return-Path: [email protected]
(SquirrelMail authenticated user user1)
by 172.16.78.8 with HTTP;
X-FEAS-HASH: 6ef419f0a0608b1655xxxxe68080df3cb12fc38f1118d2f085985eeb000274d7
Sat, 18 Apr 2009 15:53:06 +0200 (CEST)
Message-ID : <[email protected]>
Date : Sat, 18 Apr 2009 15 :53 :06 +0200 (CEST)
Subject: [SPAM] Sales
From: [email protected]
User-Agent: SquirrelMail/1.4.10a-1.fc6
MIME-Version : 1.0
Content-Type : text/plain ;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-Original-To: [email protected]
Delivered-To: [email protected]
Received: from fm.sub.training1.lab (fm.sub.training1.lab [192.168.11.101])
by mail.training.lab (Postfix) with ESMTP id A9160187073
for <[email protected]>; Sun, 19 Apr 2009 16:58:48 +0200 (CEST)
Received: from mail.external.lab ([172.16.78.8])
by fm.sub.training1.lab with ESMTP id n3LEPHWu001093
for <[email protected]>; Tue, 21 Apr 2009 10:25:17 -0400
Received: from 172.16.78.8 (localhost [127.0.0.1])
by mail.external.lab (Postfix) with ESMTP id 247D9BF893
for <[email protected]>; Sat, 18 Apr 2009 15:53:06 +0200 (CEST)
Received: from 192.168.3.101
- DNSBL scan
- Dictionary scan
- Banned Word scan
- FortiGuard checksum
Correct answer: D
Question 6
Which of the following statements is true regarding Session-based antispam techniques?
- The entire mail content is inspected.
- They are enabled in the session profile only.
- SMTP commands, sender domain and IP address are checked.
- They are checked after application-based antispam techniques.
Correct answer: C
Question 7
Which of the following statements regarding the FortiMail unit's Greylisting feature is NOT correct?
- The FortiMail unit tracks the /32 bit host address of the sender.
- When an email is received from a new sender IP address, envelope sender and envelope recipient addresses, the FortiMail unit will initially send a temporary failure message.
- After the initial temporary fail message is sent, the message must be retransmitted between the Greylisting period expiry and initial expiry time periods.
- Pass-through is allowed until the configured TTL expires.
- An ACL with action Relay bypasses Greylisting.
Correct answer: A
Question 8
Which of the following is an advantage of using Banned Word scanning instead of Dictionary scanning?
- Mail Headers are inspected.
- It is easier to configure.
- Regular Expressions can be used.
- Non-ASCII characters are supported.
Correct answer: B
Question 9
Which operation is performed by the Forged IP scanning technique?
- DNS PTR record lookup on the sender's IP address then A record lookup on the canonical hostname
- DNS A record lookup on the sender's IP address then PTR record lookup
- DNS MX record lookup on the sender canonical hostname
- DNS TXT record lookup
Correct answer: A
Question 10
When using Sender Reputation on a FortiMail unit, which of the following actions can be taken against a source IP address generating spam or invalid email messages?
- Delay the email messages from that source IP address with a temporary fail.
- Reject the email messages from that source IP address with a permanent fail.
- Quarantine all the email messages from that source IP address.
- Limit the number of email messages allowed from that source IP address.
Correct answer: ABD
