Validate your FCP_FML_AD-7.4 Exam Preparation with FCP_FML_AD-7.4 Practice Test (Online & Offline)
Get all the Information About Fortinet FCP_FML_AD-7.4 Exam 2026 Practice Test Questions
NEW QUESTION # 12
Refer to the exhibit, which shows a partial antispam profile configuration.
What will happen to an email that triggers Spam outbreak protection?
- A. The email is held in a deferred queue for a period of time.
- B. The email is rejected.
- C. The email is logged.
- D. The email is marked as clean and released to the recipient.
Answer: C
NEW QUESTION # 13
Which two types of remote authentication are supported for FortiMail administrator accounts?
(Choose two.)
- A. Kerberos
- B. Single Sign-on
- C. RADIUS
- D. TACACS
Answer: B,C
Explanation:
FortiMail supports RADIUS and SSO-based authentication for administrator access.
NEW QUESTION # 14
Refer to the exhibit, which shows the output of an email transmission using a telnet session.
What are two correct observations about this SMTP session? (Choose two.)
- A. The "250 Message accepted for delivery" message is part of the message body.
- B. The "Subject" is part of the message header.
- C. The SMTP envelope addresses are different from the message header addresses.
- D. The "220 mx.internal.lab ESMTP Smtpd" message is part of the SMTP banner.
Answer: B,D
Explanation:
The line 220 mx.internal.lab ESMTP Smtpd is the server's SMTP banner sent immediately upon connection.
The Subject: field appears in the message header, not the SMTP envelope or body.
NEW QUESTION # 15
Exhibit.
Refer to the exhibits, which show an email archiving configuration (Email Archiving 1 and Email Archiving
2) from a FortiMail device.
What two archiving actions will FortiMail take when email messages match these archive policies? (Choose two.)
- A. FortiMail will exempt spam email from archiving.
- B. FortiMail will allow only the marketingeexample.com account to access the archived email.
- C. FortiMail will save archived email in the journal account.
- D. FortiMail will archive email sent from marketingexample. com.
Answer: A,C
NEW QUESTION # 16
A mail user wants the ability to subscribe or publish to and from their FortiMail calendar using Thunderbird as their mail user agent (MUA).
What information does this mail user need from their webmail User Preferences section?
- A. Free busy URL
- B. Service URLs
- C. Secondary account configurations
- D. Message tags
Answer: B
Explanation:
The "Service URLs" section in Webmail > User Preferences shows each account's CalDAV (and iCal) endpoints. Thunderbird needs those URLs to subscribe to or publish calendar data on FortiMail.
NEW QUESTION # 17
In which two ways does a transparent mode FortiMail use the build-it MTA to process email? (Choose two.)
- A. The built-in MTA must connect to an external relay host to deliver email.
- B. It can queue undeliverable messages and generate DSNs.
- C. MUAs must be configured to connect to the built-in MTA to send email.
- D. It ignores the destination set by the sender and uses its own MX record lookup.
Answer: C,D
NEW QUESTION # 18
An organization has different groups of users with different needs in email functionality, such as address book access, mobile device access, email retention periods, and disk quotas.
Which FortiMail feature specific to server mode can be used to accomplish this?
- A. Email group profiles
- B. Domain-level service settings
- C. Access profiles
- D. Resource profiles
Answer: D
Explanation:
In FortiMail's server mode, Resource Profiles let you group mailboxes by things like disk-quota limits and message-retention periods, while corresponding Access Profiles control services such as address-book and mobile (ActiveSync) access. By defining different resource profiles for each user class, you can give each group its own quota and retention settings (and pair them with matching access profiles for service access).
NEW QUESTION # 19
Refer to the exhibits, which show an email archiving configuration (Email Archiving 1 and Email Archiving 2) from a FortiMail device.
What two archiving actions will FortiMail take when email messages match these archive policies? (Choose two.)
- A. FortiMail will exempt spam email from archiving.
- B. FortiMail will save archived email in the journal account.
- C. FortiMail will archive email sent from [email protected].
- D. FortiMail Will allow only the [email protected] account to access the archived email.
Answer: A,B
Explanation:
FortiMail will exempt spam email from archiving.
The Email Archiving Exempt Policy is set to "Spam Email," so any messages identified as spam are skipped.
FortiMail will save archived email in the journal account.
Both policies target the same "journal" account, so all non-exempt matching messages go into that mailbox.
NEW QUESTION # 20
Refer to the exhibit, which shows a few lines of FortiMail logs.
Based on these log entries, which two statements describe the operational status of this FortiMail device?
(Choose two.)
- A. The FortiMail device is in server mode.
- B. FortiMail is experiencing issues accepting the connection from the external. lab MTA.
- C. The FortiMail device is in gateway or transparent mode.
- D. FortiMail is experiencing issues delivering the email to the internal. lab MTA.
Answer: C,D
NEW QUESTION # 21
Refer to the exhibits, which display a topology diagram (Topology) and two FortiMail device configurations (FML1 Configuration and FML2 Configuration).
What is the expected outcome of SMTP sessions sourced from FML1 and destined for FML2?
- A. FML1 will attempt to establish an SMTPS session with FML2. but fail and revert to standard SMTP.
- B. FML1 will fail to establish any connection with FML2.
- C. FML1 will successfully establish an SMTPS session with FML2.
- D. FML1 will send the STARTTLS command in the SMTP session, which will be rejected by FML2.
Answer: C
NEW QUESTION # 22
What are two disadvantages of configuring the dictionary and DLP scan rule aggressiveness too high? (Choose two.)
- A. High aggressiveness scan settings do not support executable file types.
- B. It is more resource intensive
- C. FortiMail requires more disk space for the additional rules.
- D. More false positives could be detected.
Answer: B,D
NEW QUESTION # 23 
Refer to the exhibit, which shows an antivirus action profile.
What are two expected outcomes if FortiMail applies this antivirus action profile to an email? (Choose two.)
- A. A replacement message will be added to the email.
- B. Virus content will be removed from the email.
- C. The sanitized email will be sent to the recipient's personal quarantine.
- D. The original email will be sent to the system quarantine.
Answer: A,B
NEW QUESTION # 24
A mail user wants the ability to subscribe or publish to and from their FortiMail calendar using Thunderbird as their mail user agent (MUA). What information does this mail user need from their webmail User Preferences section?
- A. Free busy URL
- B. Secondary account configurations
- C. Service URLs
- D. Message tags
Answer: B
NEW QUESTION # 25
Refer to the exhibits, showing SMTP limits (Session Profile -- SMTP Limits), and domain settings (Domain Settings, and Domain Settings -- Other) of a FortiMail device.
Which message size limit in KB will the FortiMail apply to outbound email?
- A. There is no message size limit for outbound email from a protected domain.
- B. 0
- C. 1
- D. 2
Answer: B
NEW QUESTION # 26 
Refer to the exhibits, which shows a DLP scan profile configuration (DLP Scan Rule 1 and DLP Scan Rule 2) from a FortiMail device.
Which two message types will trigger this DLP scan rule? (Choose two.)
- A. An email that contains credit card numbers in the body, attachment, and subject will trigger this scan rule.
- B. An email message that contains credit card numbers in the body will trigger this scan rule.
- C. An email sent from sales@internal. lac will trigger this scan rule, even without matching any conditions.
- D. An email message with a subject that contains the term 'credit card" will trigger this scan rule.
Answer: B,D
NEW QUESTION # 27
Which two antispam techniques query FortiGuard for rating information? (Choose two.)
- A. IP reputation
- B. URL filter
- C. SURBL
- D. DNSBL
Answer: A,B
NEW QUESTION # 28
Refer to the exhibit, which displays the Mail Settings page of a FortiMail device running in gateway mode.
In addition to selecting Check External Domain in the MTA-STS service field, what else must an administrator do to enable MTA-STS?
- A. Enable MTA-STS action in the appropriate inbound recipient policy.
- B. Enable MTA-STS in the associated TLS profile.
- C. Enable SMTPUTF8 support in the mail server settings.
- D. Enable secure authentication in the associated SMTP authentication profile.
Answer: B
Explanation:
You must enable MTA-STS in whatever TLS profile your outbound IP policy uses-only then will FortiMail honor the "Check External Domain" setting.
NEW QUESTION # 29
Which statement about how impersonation analysis identifies spoofed email addresses is correct?
- A. It uses DMARC validation to detect spoofed addresses.
- B. It uses behavior analysis to detect spoofed addresses.
- C. It maps the display name to the correct recipient email address
- D. It uses SPF validation to detect spoofed addresses.
Answer: A
NEW QUESTION # 30
Which two statements describe the push delivery method used by IBE? (Choose two.)
- A. FortiMail generates a notification email message with an embedded HTTPS URL
- B. Decrypted email is displayed using the HTTPS webmail interface
- C. The recipient accesses the HTTPS link and logs in to the FortiMail secure message portal
- D. FortiMail encrypts the email and adds it to a notification email as an HTML attachment
Answer: B,D
Explanation:
In push mode, FortiMail encrypts the message and delivers it directly (often as an HTML attachment), which can be viewed securely through a web interface.
NEW QUESTION # 31
When the domain keys identified mail (DKIM) feature is used, where is the public key stored?
- A. The public key is distributed during the SMTP session establishment
- B. The public key is stored in a DNS server as a PTR record
- C. The public key is stored in the local FortiMail flash memory
- D. The public key is stored in a DNS server as a TXT record
Answer: D
Explanation:
DKIM uses a public key published in DNS as a TXT record so receiving servers can verify message signatures.
NEW QUESTION # 32
A FortiMail administrator is concerned about cyber criminals attempting to get sensitive information from employees using whaling phishing attacks. What option can the administrator configure to prevent these types of attacks?
- A. Dictionary profile with predefined smart identifiers
- B. Bounce tag verification
- C. Impersonation analysis
- D. Content disarm and reconstruction
Answer: C
NEW QUESTION # 33
Refer to the exhibits. The exhibits display a topology diagram of a FortiMail cluster (Topology) and the primary HA interface configuration of the Primary FortiMail (HA Interface Configuration).
Which three actions are recommended when configuring the primary FortiMail HA interface?
(Choose three.)
- A. Disable Enable port monitor
- B. In the Virtual IP action drop-down list, select Use.
- C. In the Heartbeat status drop-down list, select Primary
- D. In the Peer IP address field, type 172.16.32.57
- E. In the Virtual IP address field, type 172.16.32.55/24
Answer: B,D,E
Explanation:
Here are the three settings you should change on the Primary's HA port1 interface:
- Set Virtual IP action to Use
- Enter 172.16.32.55/24 as the Virtual IP address
- Enter 172.16.32.57 as the Peer IP address
With those in place, the Primary will advertise and answer on the cluster VIP (172.16.32.55) and know how to reach its Secondary peer (172.16.32.57).
NEW QUESTION # 34
......
Check Real Fortinet FCP_FML_AD-7.4 Exam Question for Free (2026): https://exampdf.dumpsactual.com/FCP_FML_AD-7.4-actualtests-dumps.html
