[Aug-2026] Practice Fortinet FCP_FML_AD-7.4 exam. Online Exam Practice Tests with detailed explanations! Pass FCP_FML_AD-7.4 with confidence! [Q12-Q36]

Practice FCP in Public Cloud Security FCP_FML_AD-7.4 exam. Online Exam Practice Tests with detailed explanations! Pass FCP_FML_AD-7.4 with confidence!

FCP_FML_AD-7.4 - FCP - FortiMail 7.4 Administrator Practice Tests 2026 | SureTorrent

NEW QUESTION # 12
Which two antispam techniques query FortiGuard for rating information? (Choose two.)

A. DNSBL
B. SURBL
C. IP reputation
D. URL filter

Answer: C,D

NEW QUESTION # 13
Refer to the exhibit, which shows a topology diagram of a FortiMail cluster deployment.

Which IP address must the DNS MX record for this organization resolve to?

A. 1172 16 32 57
B. 172.16.32.56
C. 172.16.32.1
D. 172.16.32.55

Answer: D

NEW QUESTION # 14
What are two benefits of having authentication reputation tracking enabled on FortiMail? (Choose two.)

A. Temporarily locks out an attacker
B. Enforces SMTP authentication
C. Tracks offending IP addresses attempting brute force attacks
D. Detects spoofed SMTP header addresses

Answer: A,C

Explanation:
Authentication reputation tracking monitors repeated authentication failures and can track malicious IPs and temporarily block attackers.

NEW QUESTION # 15
Refer to the exhibit, which shows the output of an email transmission using a telnet session.

What are two correct observations about this SMTP session? (Choose two.)

A. The SMTP envelope addresses are different from the message header addresses.
B. The "250 Message accepted for delivery" message is part of the message body.
C. The "Subject" is part of the message header.
D. The "220 mx.internal.lab ESMTP Smtpd" message is part of the SMTP banner.

Answer: C,D

Explanation:
The line 220 mx.internal.lab ESMTP Smtpd is the server's SMTP banner sent immediately upon connection.
The Subject: field appears in the message header, not the SMTP envelope or body.

NEW QUESTION # 16
An organization has different groups of users with different needs in email functionality, such as address book access, mobile device access, email retention periods, and disk quotas. Which FortiMail feature specific to server mode can be used to accomplish this?

A. Email group profiles
B. Domain-level service settings
C. Access profiles
D. Resource profiles.

Answer: D

NEW QUESTION # 17
Which item is a supported one-time secure token for IBE authentication?

A. Security question
B. FortiToken
C. Certificate
D. SMS

Answer: A

NEW QUESTION # 18
Refer to the exhibit, which displays an access control rule. What are two expected behaviors for this access control rule? (Choose two.)

A. Emails must be sent from the 10.0.1.0/24subnet.
B. Senders must be authenticated to match this rule.
C. Email must originate from an example.comemail address.
D. Email matching this rule will be relayed.

Answer: C,D

Explanation:
Email matching this rule will be relayed.
The rule's Action is set to Relay, so any message that matches the rule is forwarded onward.
Email must originate from an example.com email address.
The Sender field is "*@example.com," so only envelopes with a MAIL FROM in that domain match.

NEW QUESTION # 19
In which FortiMail configuration object can you assign an outbound session profile?

A. Access delivery rule
B. Inbound recipient policy
C. Outbound recipient policy
D. IP policy

Answer: D

NEW QUESTION # 20
Refer to the exhibit, which shows a topology diagram of two MTAs.

MTA-1 is delivering an email intended for User 1 to MTA-2. User 1 uses Outlook as an email client. Which two statements about protocol usage between these devices are correct? (Choose two.)

A. MTA-1 will use POP3 to deliver the email message to User 1 directly.
B. MTA-2 will use IMAP to download the email message from MTA-1.
C. MTA-1 will use SMTP to deliver the email message to MTA-2.
D. User 1 will use IMAP or POP3 to download the email message from MTA-2.

Answer: C,D

NEW QUESTION # 21
Refer to the exhibit, which displays the domain configuration of a FortiMail device running in transparent mode.

Based on the exhibit, which two sessions are considered incoming sessions? (Choose two.)

A. DESTINATION IP:172.16.32.56 MAIL FROM: [email protected] RCPT TO:marketingeaxampla.com
B. BDESTINATION IP:10.25.32.15 MAIL FROM: [email protected] RCPT TO: students@external.
com
C. DESTINATIONIP:192.163.54.10 MAIL FROM: [email protected] RCPT TO: saleseexamplc.
com
D. DESTINATIONIP:172.16.32.56 MAIL FROM: misfihosted.net RCPT TO: noc9example.com

Answer: B,C

NEW QUESTION # 22
Refer to the exhibit, which shows an inbound recipient policy.

After creating the policy shown in the exhibit, an administrator discovers that clients can send unauthenticated emails using SMTP.
What must the administrator do to enforce authentication?

A. Configure a matching IP policy with the exclusive flag enabled.
B. Configure an access delivery rule to enforce authentication.
C. Move this incoming recipient policy to the top of the list.
D. Configure an access receive rule toverifyauthentication status.

Answer: D

NEW QUESTION # 23
Refer to the exhibit, which shows a command prompt output of a telnet command.

Which configuration change must you make to prevent the banner from displaying the FortiMail serial number?

A. Add a protected domain
B. Configure a local domain name
C. Change the host name
D. Change the operation mode

Answer: C

NEW QUESTION # 24
Refer to the exhibit, which displays the domain configuration of a FortiMail device running in transparent mode.

Based on the exhibit, which two sessions are considered incoming sessions? (Choose two.) DESTINATION IP: 192.168.54.10 MAIL FROM: [email protected] RCPT TO:

A. [email protected]
DESTINATION IP: 172.16.32.56 MAIL FROM: [email protected] RCPT TO:
B. [email protected]
DESTINATION IP: 10.25.32.15 MAIL FROM: [email protected] RCPT TO:
C. [email protected]
DESTINATION IP: 172.16.32.56 MAIL FROM: [email protected] RCPT TO:
D. [email protected]

Answer: A,B

Explanation:
The sessions that originate from SMTP clients connecting into FortiMail are:
- A client connecting to 192.168.54.10 and sending mail from [email protected] to [email protected].
- A client connecting to 10.25.32.15 and submitting mail from [email protected] to [email protected].
Both of these represent inbound SMTP traffic terminating on the FortiMail device. The other sessions are FortiMail itself relaying messages onward to the configured back-end server, so they are considered outgoing.

NEW QUESTION # 25
A FortiMail administrator is investigating a sudden increase in DSNs being delivered to their protected domain. After searching the logs, the administrator identifies that the DSNs were not generated because of any outbound email sent from their organization.
Which FortiMail antispam technique can the administrator enable to prevent this scenario?

A. Spoofed header detection
B. FortiGuard IP Reputation
C. Bounce address tag validation
D. Spam outbreak protection

Answer: C

Explanation:
Enabling Bounce Address Tag Validation prevents FortiMail from accepting forged bounce messages (backscatter) for mail it never actually sent, stopping those unsolicited DSNs from reaching your users.

NEW QUESTION # 26
Refer to the exhibit, which shows an inbound recipient policy.

After creating the policy, an administrator discovers that clients can send Inbound Recipient Policy unauthenticated emails using SMTP.
What must the administrator do to enforce authentication?

A. Configure an access receive rule to verify authentication status.
B. Configure a matching IP policy with the exclusive flag enabled.
C. Configure an access delivery rule to enforce authentication.
D. Configure an outbound recipient policy for LDAP authentication.

Answer: A

Explanation:
You need to create an Access Receive Rule that matches your incoming mail and sets Authentication status to "Authenticated." That rule will block any SMTP session that isn't authenticated before it ever reaches the recipient policy.

NEW QUESTION # 27
Refer to the exhibit, which shows a topology diagram of two separate email domains.

Which two statements correctly describe how an email message is delivered from User A to User B? (Choose two.)

A. User A's MUA will perform a DNS MX record lookup to send the email message.
B. The DNS server will act as an intermediary MTA.
C. mx.example1.org will forward the email message to the MX record that has the lowest preference.
D. User B will retrieve the email message using either POP3 or IMAP.

Answer: C,D

NEW QUESTION # 28
Refer to the exhibit.

What does the Scan timeout value configure?

A. How long FortiMail will waitfor a scan result from FortiSandbox
B. How often the local scan results cache will expire on FortiMail
C. How often FortiMail will query FortiSandbox for a scan result
D. How long FortiMail will wait to send a file or URI to FortiSandbox

Answer: A

NEW QUESTION # 29
Refer to the exhibits, showing SMTP limits (Session Profile -- SMTP Limits), and domain settings (Domain Settings, and Domain Settings -- Other) of a FortiMail device.

Which message size limit in KB will the FortiMail apply to outbound email?

A. There is no message size limit for outbound email from a protected domain.
B. 0
C. 1
D. 2

Answer: B

NEW QUESTION # 30
What are Two reasons for having reliable DNS servers configured on FortiMail? (Choose two.)

A. Email transmission
B. FortiGuard Connectivity
C. Firmware updates
D. HA synchronization

Answer: A,B

NEW QUESTION # 31
Refer to the exhibits, which show a topology diagram (Topology) and a configuration element (Access Control Rule).

An administrator wants to configure an access receive rule to match authentication status on FML-1 for all outbound email from the example.com domain.
Which two access receive rule settings must the administrator configure? (Choose two.)

A. The Recipient pattern must be set to *@example.com.
B. The Authentication status must be set to Authenticated.
C. The Sender IP/netmask must be set to 10.29.1.0/24.
D. ATLS profile must be configured and applied.

Answer: B,C

Explanation:
Scope the rule to your LAN by setting Source to 10.29.1.0/24.
Set Authentication status to Authenticated so only authenticated SMTP sessions match.

NEW QUESTION # 32
Refer to the exhibit, which displays the Mail Settings page of a FortiMail device running in gateway mode.

In addition to selecting Check External Domain in the MTA-STS service field, what else must an administrator do to enable MTA-STS?

A. Enable MTA-STS in the associated TLS profile.
B. Enable secure authentication in the associated SMTP authentication profile.
C. Enable SMTPUTF8 support in the mail server settings.
D. Enable MTA-STS action in the appropriate inbound recipient policy.

Answer: B

NEW QUESTION # 33
Refer to the exhibit, which shows a partial antispam profile configuration.

What will happen to an email that triggers Spam outbreak protection?

A. The email is held in a deferred queue for a period of time.
B. The email is logged.
C. The email is marked as clean and released to the recipient.
D. The email is rejected.

Answer: B

Explanation:
With "Spam outbreak protection" set to Monitor only, messages that match an outbreak signature are simply logged for review but not blocked or otherwise held.

NEW QUESTION # 34
Refer to the exhibit, which shows the output of an email transmission using a telnet session.

What are two correct observations about this SMTP session? (Choose two.)

A. The SMTP envelope addresses are different from the message header addresses.
B. The"220 mx. internal, lab ESMTPSmtpd" message is part of the SMTP banner.
C. The "250Message accepted for delivery" message is part ofthe message body.
D. The "Subject" is part of the message header.

Answer: B,D

NEW QUESTION # 35
Refer to the exhibits showing SMTP limits (Session Profile - SMTP Limits), and domain settings (Domain Settings, andDomain Settings - Other) of a FortiMail device.

Which message size limit in KB will the FortiMail apply to outbound email?