View Full Fortinet FCP_FML_AD-7.4 Exam Dumps and Practice Test Dumps.

Q121. What is the purpose of an address rewrite profile?

1. Increase mailbox quota
2. Modify email address information
3. Update antivirus signatures
4. Configure disk storage

Correct Answer: 2. Modify email address information

Explanation

An address rewrite profile allows FortiMail to change selected sender or recipient address information during mail processing. It can be useful when internal addresses must appear differently to external recipients or when organizations need to translate addresses between internal and external formats. Rewrite rules can work with locally configured values or information retrieved through supported directory services. The profile must be associated with the appropriate session processing configuration before it affects messages. Address rewriting does not increase mailbox quotas or update antivirus signatures. Its purpose is modifying email address information according to defined messaging requirements.

Q122. What is a benefit of domain association?

1. Creates antivirus databases
2. Increases interface speed
3. Deletes protected domains
4. Reuses settings across related domains

Correct Answer: 4. Reuses settings across related domains

Explanation

Domain association allows additional mail domains to use the configuration of an existing protected domain. This is useful when several domains are handled by the same mail infrastructure and require similar settings. Instead of creating and maintaining identical configuration separately for every domain, administrators can associate them with one protected domain. Changes to shared settings can then be managed more consistently. This reduces administrative effort and the chance of configuration differences. Domain association does not delete protected domains or create antivirus databases. Its purpose is simplifying management of multiple domains that require similar FortiMail settings.

Q123. What can a system level administrator access?

1. System wide permitted settings
2. Only one user mailbox
3. Only personal quarantine
4. Only webmail preferences

Correct Answer: 1. System wide permitted settings

Explanation

A system level administrator can access FortiMail configuration areas across the appliance according to the permissions granted by the assigned administrator profile. This scope can include system wide settings and protected domain configuration where the administrator profile allows access. Permissions are still controlled by the administrator profile, so system scope does not automatically mean unrestricted access to every function. This differs from domain scoped administration, which is limited primarily to assigned protected domains. System level administration is not restricted to personal quarantine or mailbox preferences. It provides broader management scope across the FortiMail system.

Q124. What is the main restriction of a domain level administrator?

1. Cannot use a password
2. Cannot view email logs
3. Access is limited to assigned domains
4. Cannot use the GUI

Correct Answer: 3. Access is limited to assigned domains

Explanation

A domain level administrator is restricted mainly to the protected domain or domains assigned to that administrator. This allows organizations to delegate administration without granting access to unrelated domains or system wide configuration. The administrator profile still determines which permitted functions are available inside that scope. Domain based administration can be useful for hosted environments or organizations where different teams manage separate domains. The restriction does not mean the administrator cannot use the GUI or authentication. Its purpose is limiting administrative authority to designated domain resources rather than the entire FortiMail appliance.

Q125. What can an email delivery access rule require?

1. TLS for selected delivery sessions
2. Larger mailbox storage
3. New administrator accounts
4. Disabled antivirus scanning

Correct Answer: 1. TLS for selected delivery sessions

Explanation

A delivery access rule can apply requirements to SMTP sessions initiated by FortiMail when it sends email to another mail server. One important use is requiring TLS for selected destinations. The rule can match recipient information and destination server addresses and then apply a TLS profile. This allows organizations to enforce stronger transport security when communicating with particular partners or domains. Delivery access rules do not increase mailbox storage or disable antivirus scanning. Their purpose is controlling security conditions for outgoing SMTP delivery sessions initiated by FortiMail.

Q126. What can a delivery control rule limit?

1. Administrator login attempts
2. Recipients per message
3. DNS cache size
4. Antivirus engine versions

Correct Answer: 2. Recipients per message

Explanation

Delivery control rules can limit aspects of outbound SMTP delivery such as the number of recipients allowed in a message, the number of messages per connection, or the number of concurrent connections. These controls help prevent excessive delivery activity and can protect downstream mail systems from unusual traffic patterns. Administrators can configure limits according to recipient domains and business requirements. Delivery control rules are unrelated to administrator login attempts or antivirus versions. Their purpose is controlling the volume and behavior of SMTP delivery performed by FortiMail.

Q127. How does an email address mapping normally operate?

1. Only on archived mail
2. Only on administrator accounts
3. Only on inbound attachments
4. In both incoming and outgoing directions

Correct Answer: 4. In both incoming and outgoing directions

Explanation

Email address mappings can translate addresses between internal and external forms and operate bidirectionally. This allows an internal address to appear as an external address when sending mail while messages sent to the external address can be directed back to the appropriate internal recipient. Address mappings can affect envelope and header information according to the configured match conditions. They are useful when organizations need to hide internal addressing or use externally recognized addresses. They are not limited to archived mail or attachments. Their purpose is consistent address translation across inbound and outbound email flow.

Q128. What does a BCC action add during message processing?

1. A DNS record
2. A mailbox password
3. A blind copy recipient
4. A new interface

Correct Answer: 3. A blind copy recipient

Explanation

A BCC action allows FortiMail to send a blind copy of a processed message to another recipient address. This can support monitoring, compliance, auditing, or business requirements where an additional copy must be delivered without appearing as a normal visible recipient. BCC can be used as part of supported message action profiles. Administrators should configure the destination carefully because copied messages may contain sensitive information. A BCC action does not create DNS records or interfaces. Its purpose is adding an additional hidden recipient to selected email messages during processing.

Q129. What can deferred delivery help manage?

1. Administrator permissions
2. Resource intensive email delivery
3. DNS ownership
4. Mailbox passwords

Correct Answer: 2. Resource intensive email delivery

Explanation

Deferred delivery can delay certain messages so they are delivered later instead of immediately. This can be useful for large messages, marketing campaigns, mass mailing, or other traffic that could place additional load on a mail server. By postponing lower priority or resource intensive email, FortiMail can help protect delivery performance for normal business messages. Administrators should apply the feature according to operational needs so important mail is not delayed unnecessarily. Deferred delivery does not control administrator permissions or passwords. Its purpose is managing the timing of selected message delivery to reduce resource pressure.

Q130. Which protocols can server mode users use for mailbox access?

1. POP3 and IMAP
2. DNS and DHCP
3. SNMP and NTP
4. FTP and TFTP

Correct Answer: 1. POP3 and IMAP

Explanation

When FortiMail operates in server mode, it can host email user mailboxes directly. Users can access their mail through supported methods that include webmail and standard mailbox protocols such as POP3 and IMAP when enabled. This allows traditional email clients to retrieve or synchronize messages from FortiMail. Administrators should configure secure access and authentication according to organizational policy. DNS, DHCP, SNMP, and NTP perform other network functions and are not mailbox access protocols. POP3 and IMAP provide users with standard client based access to hosted email.

Q131. What is the purpose of a FortiMail address book?

1. Store antivirus signatures
2. Configure SMTP routes
3. Manage interface addresses
4. Provide shared contact information

Correct Answer: 4. Provide shared contact information

Explanation

The FortiMail address book can provide shared contact information for users who access supported mailbox and webmail services. Administrators can maintain global or domain based contacts and contact groups depending on the deployment. This gives users a common directory of addresses when composing messages. Address book information can also be imported or synchronized from supported directory sources. It is not used to store antivirus signatures or configure network interfaces. Its purpose is making shared contact information available to email users in a structured and manageable form.

Q132. What does an LDAP attribute mapping template support?

1. Disk formatting
2. Contact data mapping from LDAP
3. Antivirus scanning
4. SMTP queue deletion

Correct Answer: 2. Contact data mapping from LDAP

Explanation

An LDAP attribute mapping template defines how information stored in an LDAP directory corresponds to contact fields used by the FortiMail address book. This allows organizations to import or synchronize existing directory contacts instead of entering every contact manually. Correct mapping ensures that names, email addresses, and related information appear in the appropriate fields. This can simplify address book administration in environments where contact information already exists in a central directory. The template does not control antivirus scanning or disk formatting. Its purpose is connecting LDAP contact attributes with FortiMail address book information.

Q133. What can a resource profile control for an email user?

1. Interface route priority
2. FortiGuard server selection
3. Disk space quota
4. DKIM public key

Correct Answer: 3. Disk space quota

Explanation

A resource profile can define several settings associated with FortiMail email users. In server mode, one important setting is the disk space quota available to a mailbox. Resource profiles can also control supported user access features depending on the configuration. Applying resource limits helps administrators manage storage and user services consistently. These profiles can be selected through appropriate policies. They do not configure DKIM public keys or FortiGuard servers. Their purpose is controlling user related resources and access settings that affect how email users interact with FortiMail services.

Q134. What can a GeoIP group represent?

1. Selected geographic countries or regions
2. Mailbox folders
3. Administrator passwords
4. Antivirus signatures

Correct Answer: 1. Selected geographic countries or regions

Explanation

A GeoIP group represents selected countries or geographic regions based on the geographic location associated with SMTP client IP addresses. FortiMail can use these groups in access control rules or IP based policies. This allows administrators to apply different email security behavior according to the geographic source of a connection. GeoIP controls can be useful when particular regions require special treatment or are frequent sources of unwanted traffic. Geographic information should be used carefully because IP location is not always perfect. GeoIP groups do not represent mailboxes or antivirus signatures.

Q135. What can an IP pool provide for outgoing email?

1. Larger quarantine space
2. Stronger mailbox passwords
3. Additional archive folders
4. A range of source IP addresses

Correct Answer: 4. A range of source IP addresses

Explanation

An IP pool can define a range of addresses that FortiMail uses when sending email. Outgoing messages can use addresses from the configured pool instead of always originating from one source IP. This can support routing, reputation management, or mail architecture requirements. IP pools can also be used in other supported delivery scenarios involving protected SMTP servers. Administrators must ensure that routing, DNS, firewall rules, and reputation controls support the selected addresses. IP pools do not increase quarantine space or mailbox security. Their purpose is providing defined IP addresses for FortiMail mail delivery behavior.

Q136. What can a receiving access control rule decide?

1. Disk quota size
2. Archive search duration
3. Whether an SMTP session may relay
4. Mailbox folder names

Correct Answer: 3. Whether an SMTP session may relay

Explanation

Receiving access control rules determine how FortiMail handles SMTP sessions initiated by external clients connecting to the appliance. Rules can match connection and address information and then allow, reject, discard, or permit relay according to configuration. This makes access control important for preventing unauthorized relay while still allowing legitimate users and trusted mail systems to send messages. Rule order matters because the matching rule determines the resulting behavior. Receiving access control does not manage mailbox folders or disk quotas. Its purpose is controlling SMTP access and relay behavior for incoming connections.

Q137. What can email continuity provide when a protected mail server is unavailable?

1. Temporary message holding
2. New DNS zones
3. Administrator account creation
4. Antivirus signature editing

Correct Answer: 1. Temporary message holding

Explanation

Email continuity can help preserve email service when the protected mail server becomes temporarily unavailable. FortiMail can hold incoming messages in a continuity queue and deliver them after the protected server becomes available again. Depending on licensed features and configuration, users may also have limited access to messaging services during the disruption. This reduces the impact of backend mail server outages on email availability. Email continuity does not create administrator accounts or edit antivirus signatures. Its purpose is maintaining temporary email availability and storing messages until normal delivery can resume.

Q138. In which mode are domain associations not used?

1. Gateway mode
2. Server mode
3. Transparent mode
4. Gateway and transparent modes

Correct Answer: 2. Server mode

Explanation

Domain associations are designed for gateway and transparent deployments where multiple domains can share the settings of a protected domain. In server mode, FortiMail hosts mailboxes and manages domains differently, so domain associations are not used in the same manner. Understanding this distinction is important when moving between operation modes because some configuration options are mode specific. Gateway and transparent modes can benefit from associations when several domains require identical protected domain settings. Server mode instead uses its own local domain and user configuration for hosted mailbox services.

Q139. How are email delivery access rules evaluated?

1. Randomly
2. By oldest message
3. By largest recipient list
4. From top to bottom

Correct Answer: 4. From top to bottom

Explanation

Email delivery access rules are evaluated according to their sequence in the rule list. FortiMail checks rules from the top downward and applies the first matching delivery rule. Once a rule matches, subsequent delivery rules are not applied to that SMTP session. Rule ordering is therefore important when specific destinations require different TLS or encryption behavior. A broad rule placed above a more specific rule can prevent the specific rule from matching. Delivery rules are not selected randomly or based on message size. Their sequence determines which matching rule controls the delivery session.

Q140. What does a replacement message profile define?

1. Mail server IP addresses
2. Administrator roles
3. Text shown when content is replaced
4. Antivirus database sources

Correct Answer: 3. Text shown when content is replaced

Explanation

A replacement message profile defines message text that FortiMail can insert when original email content or an attachment is removed or replaced by a security action. This allows the recipient to understand that FortiMail modified the message and can provide an appropriate explanation or organizational notice. Replacement messages can improve transparency when content filtering or antivirus processing changes an email before delivery. They do not configure mail server addresses or administrator roles. Their purpose is providing clear predefined information when FortiMail replaces message content as part of security processing.