21 + Interview Questions in Fortigate Interview Questions in Fortigate Tutorial

1.	When The Domainkeys Identified Mail (dkim) Feature Is Used, Where Is The Public Key Stored?
Answer» The public KEY is STORED in the DNS TXT record. The public key is stored in the DNS TXT record.

1.

When The Domainkeys Identified Mail (dkim) Feature Is Used, Where Is The Public Key Stored?

Answer»

The public KEY is STORED in the DNS TXT record.

The public key is stored in the DNS TXT record.

Discussion

2.	In The Local Storage Structure Of The Fortimail Unit, What Does The Flash Memory Contain?
Answer» FIRMWARE IMAGE. SYSTEM CONFIGURATION. CERTIFICATES.

2.

In The Local Storage Structure Of The Fortimail Unit, What Does The Flash Memory Contain?

Answer»

Discussion

3.	A System Administrator Is Concerned By The Amount Of Disk Space Being Used To Store Quarantine Email Messages For Non-existent Accounts. Which Techniques Can Be Used On A Fortimail Unit To Prevent Email Messages From Being Quarantined For Non-existent Accounts?
Answer» RECIPIENT ADDRESS VERIFICATION.. Recipient Address Verification..

3.

A System Administrator Is Concerned By The Amount Of Disk Space Being Used To Store Quarantine Email Messages For Non-existent Accounts. Which Techniques Can Be Used On A Fortimail Unit To Prevent Email Messages From Being Quarantined For Non-existent Accounts?

Answer»

RECIPIENT ADDRESS VERIFICATION..

Recipient Address Verification..

Discussion

4.	Which Back-end Servers Can Be Used To Provide Recipient Verification?
Answer» LDAP SERVERS. SMTP servers.

4.

Which Back-end Servers Can Be Used To Provide Recipient Verification?

Answer»

LDAP SERVERS.
SMTP servers.

Discussion

5.	Which Smtp Sessions Are Defined As Incoming?
Answer» SMTP SESSIONS for the PROTECTED DOMAIN. SMTP sessions for the protected domain.

5.

Which Smtp Sessions Are Defined As Incoming?

Answer»

SMTP SESSIONS for the PROTECTED DOMAIN.

SMTP sessions for the protected domain.

Discussion

6.	Which Profile Can Be Used To Protect Against Denial Of Service Attacks?
Answer» SESSION PROFILE. session profile.

6.

Which Profile Can Be Used To Protect Against Denial Of Service Attacks?

Answer»

SESSION PROFILE.

session profile.

Discussion

7.	What Is One Reason For Deploying A Fortimail Unit In Transparent Mode?
Answer» DNS RECORDS do not NECESSARILY have to be MODIFIED. DNS records do not necessarily have to be modified.

7.

What Is One Reason For Deploying A Fortimail Unit In Transparent Mode?

Answer»

DNS RECORDS do not NECESSARILY have to be MODIFIED.

DNS records do not necessarily have to be modified.

Discussion

8.	Which Operational Mode Allows The Fortimail Unit To Operate As A Full Featured Mail Server Rather Than Just A Mail Relay Agent?
Answer» SERVER MODE. Server Mode.

8.

Which Operational Mode Allows The Fortimail Unit To Operate As A Full Featured Mail Server Rather Than Just A Mail Relay Agent?

Answer»

SERVER MODE.

Server Mode.

Discussion

9.	An Administrator Of A Fortimail Unit Operating In Server Mode Has Been Given The Requirement To Configure Disk Quotas For All The Users Of A Specific Domain. How Can The Administrator Achieve This Requirement?
Answer» Define a disk QUOTA VALUE in a RESOURCE PROFILE.. Define a disk quota value in a Resource Profile..

9.

An Administrator Of A Fortimail Unit Operating In Server Mode Has Been Given The Requirement To Configure Disk Quotas For All The Users Of A Specific Domain. How Can The Administrator Achieve This Requirement?

Answer»

Define a disk QUOTA VALUE in a RESOURCE PROFILE..

Define a disk quota value in a Resource Profile..

Discussion

10.	Which High Availability Mode Should An Administrator Choose To Provide Increased Processing Capabilities?
Answer» Config-Only. Config-Only.

10.

Which High Availability Mode Should An Administrator Choose To Provide Increased Processing Capabilities?

Answer»

Config-Only.

Discussion

11.	An Email Message Received By The Fortimail Unit Is Subject To The Bounce Verification Antispam Check Under Which Circumstances?
Answer» The envelope MAIL FROM field CONTAINS a null reverse-path. A Bounce Verification KEY is CREATED and activated.

11.

An Email Message Received By The Fortimail Unit Is Subject To The Bounce Verification Antispam Check Under Which Circumstances?

Answer»

The envelope MAIL FROM field CONTAINS a null reverse-path.
A Bounce Verification KEY is CREATED and activated.

Discussion

12.	Which History Log Field Indicates The Action Taken By The Fortimail Unit Regarding A Specific Email?
Answer» Disposition. Disposition.

12.

Which History Log Field Indicates The Action Taken By The Fortimail Unit Regarding A Specific Email?

Answer»

Disposition.

Discussion

13.	On A Fortimail Unit Operating In Transparent Mode,which Parameters Determines The Direction Of An Smtp Session?
Answer» The DESTINATION IP ADDRESS. The destination IP address.

13.

On A Fortimail Unit Operating In Transparent Mode,which Parameters Determines The Direction Of An Smtp Session?

Answer»

The DESTINATION IP ADDRESS.

The destination IP address.

Discussion

14.	When Using Sender Reputation On A Fortimail Unit, Which Actions Can Be Taken Against A Source Ip Address Generating Spam Or Invalid Email Messages?
Answer» Delay the EMAIL messages from that SOURCE IP ADDRESS with a TEMPORARY fail. Reject the email messages from that source IP address with a permanent fail. Quarantine all the email messages from that source IP address

14.

When Using Sender Reputation On A Fortimail Unit, Which Actions Can Be Taken Against A Source Ip Address Generating Spam Or Invalid Email Messages?

Answer»

Delay the EMAIL messages from that SOURCE IP ADDRESS with a TEMPORARY fail.
Reject the email messages from that source IP address with a permanent fail.
Quarantine all the email messages from that source IP address

Discussion

15.	Which Smtp Sessions Are Defined As Outgoing?
Answer» SMTP MESSAGES DESTINED for servers that are NOT PROTECTED domains. SMTP messages destined for servers that are NOT protected domains.

15.

Which Smtp Sessions Are Defined As Outgoing?

Answer»

SMTP MESSAGES DESTINED for servers that are NOT PROTECTED domains.

SMTP messages destined for servers that are NOT protected domains.

Discussion

16.	Which Operational Modes Support High Availability?
Answer» TRANSPARENT MODE. GATEWAY Mode. SERVER Mode.

16.

Which Operational Modes Support High Availability?

Answer»

Discussion

17.	Which Operation Is Performed By The Forged Ip Scanning Technique?
Answer» DNS PTR record LOOKUP on the SENDER’s IP ADDRESS then A record lookup on the canonical hostname. DNS PTR record lookup on the sender’s IP address then A record lookup on the canonical hostname.

17.

Which Operation Is Performed By The Forged Ip Scanning Technique?

Answer»

DNS PTR record LOOKUP on the SENDER’s IP ADDRESS then A record lookup on the canonical hostname.

DNS PTR record lookup on the sender’s IP address then A record lookup on the canonical hostname.

Discussion

18.	How Can A Fortimail Administrator Retrieve Email Account Information From An Ldap Server Instead Of Configuring This Data Manually On The Unit?
Answer» CONFIGURE the LDAP profile sections “USER QUERY OPTIONS” and “Authentication” then associate the profile to the domain that is locally CONFIGURED. Configure the LDAP profile sections “User query options” and “Authentication” then associate the profile to the domain that is locally configured.

18.

How Can A Fortimail Administrator Retrieve Email Account Information From An Ldap Server Instead Of Configuring This Data Manually On The Unit?

Answer»

CONFIGURE the LDAP profile sections “USER QUERY OPTIONS” and “Authentication” then associate the profile to the domain that is locally CONFIGURED.

Configure the LDAP profile sections “User query options” and “Authentication” then associate the profile to the domain that is locally configured.

Discussion

19.	Wan Optimization Is Configured In Active/passive Mode, When Will The Remote Peer Accept An Attempt To Initiate A Tunnel?
Answer» The attempt will be accepted when there is a matching WAN OPTIMIZATION PASSIVE RULE. The attempt will be accepted when there is a matching WAN optimization passive rule.

19.

Wan Optimization Is Configured In Active/passive Mode, When Will The Remote Peer Accept An Attempt To Initiate A Tunnel?

Answer»

The attempt will be accepted when there is a matching WAN OPTIMIZATION PASSIVE RULE.

The attempt will be accepted when there is a matching WAN optimization passive rule.

Discussion

20.	What Is The Method Does The Fortigate Unit Use To Determine The Availability Of A Web Cache Using Web Cache Communication Protocol (wccp)?
Answer» The WEB CACHE SENDS an “I see you” MESSAGE which is captured by the FortiGate unit. The web cache sends an “I see you” message which is captured by the FortiGate unit.

20.

What Is The Method Does The Fortigate Unit Use To Determine The Availability Of A Web Cache Using Web Cache Communication Protocol (wccp)?

Answer»

The WEB CACHE SENDS an “I see you” MESSAGE which is captured by the FortiGate unit.

The web cache sends an “I see you” message which is captured by the FortiGate unit.

Discussion

21.	When Inspecting And Delivering Mail Messages, Which Steps Could Be Taken By A Fortimail Unit Operating In Transparent Mode?
Answer» INSPECT for viruses. Inspect CONTENT of the message payload. Inspect for SPAM. PERFORM a routing lookup to decide the next HOP MTA.

21.

When Inspecting And Delivering Mail Messages, Which Steps Could Be Taken By A Fortimail Unit Operating In Transparent Mode?

Answer»

INSPECT for viruses.
Inspect CONTENT of the message payload.
Inspect for SPAM.
PERFORM a routing lookup to decide the next HOP MTA.

Discussion

Explore topic-wise InterviewSolutions in Current Affairs.

When The Domainkeys Identified Mail (dkim) Feature Is Used, Where Is The Public Key Stored?

In The Local Storage Structure Of The Fortimail Unit, What Does The Flash Memory Contain?

A System Administrator Is Concerned By The Amount Of Disk Space Being Used To Store Quarantine Email Messages For Non-existent Accounts. Which Techniques Can Be Used On A Fortimail Unit To Prevent Email Messages From Being Quarantined For Non-existent Accounts?

Which Back-end Servers Can Be Used To Provide Recipient Verification?

Which Smtp Sessions Are Defined As Incoming?

Which Profile Can Be Used To Protect Against Denial Of Service Attacks?

What Is One Reason For Deploying A Fortimail Unit In Transparent Mode?

Which Operational Mode Allows The Fortimail Unit To Operate As A Full Featured Mail Server Rather Than Just A Mail Relay Agent?

An Administrator Of A Fortimail Unit Operating In Server Mode Has Been Given The Requirement To Configure Disk Quotas For All The Users Of A Specific Domain. How Can The Administrator Achieve This Requirement?

Which High Availability Mode Should An Administrator Choose To Provide Increased Processing Capabilities?

An Email Message Received By The Fortimail Unit Is Subject To The Bounce Verification Antispam Check Under Which Circumstances?

Which History Log Field Indicates The Action Taken By The Fortimail Unit Regarding A Specific Email?

On A Fortimail Unit Operating In Transparent Mode,which Parameters Determines The Direction Of An Smtp Session?

When Using Sender Reputation On A Fortimail Unit, Which Actions Can Be Taken Against A Source Ip Address Generating Spam Or Invalid Email Messages?

Which Smtp Sessions Are Defined As Outgoing?

Which Operational Modes Support High Availability?

Which Operation Is Performed By The Forged Ip Scanning Technique?

How Can A Fortimail Administrator Retrieve Email Account Information From An Ldap Server Instead Of Configuring This Data Manually On The Unit?

Wan Optimization Is Configured In Active/passive Mode, When Will The Remote Peer Accept An Attempt To Initiate A Tunnel?

What Is The Method Does The Fortigate Unit Use To Determine The Availability Of A Web Cache Using Web Cache Communication Protocol (wccp)?

When Inspecting And Delivering Mail Messages, Which Steps Could Be Taken By A Fortimail Unit Operating In Transparent Mode?