Feb-2026 FREE Fortinet FCP_FML_AD-7.4 PRACTICE QUESTIONS AND ANSWERS UPDATES [Q20-Q38]

Rate this post

Feb-2026 FREE Fortinet FCP_FML_AD-7.4 PRACTICE QUESTIONS AND ANSWERS UPDATES

DEMO FREE BEFORE YOU BUY FCP_FML_AD-7.4 DUMPS

NEW QUESTION 20
A FortiMail administrator is investigating a sudden increase in DSNs being delivered to their protected domain. After searching the logs, the administrator identifies that the DSNs werenotgenerated because of any outbound email sent from their organization.
Which FortiMail antispam technique can the administrator use to prevent this scenario?

FortiGuard IP Reputation

Spoofed header detection

Spam outbreak protection

Bounce address tag validation

NEW QUESTION 21
Reter to the exhibits.

The exhibits display a topologydiagram of a FortiMail cluster (Topology) and the primary HA interface configuration of the Primary FortiMail (HA Interface Configuration) Which three actions are recommended when configuring the primary FortiMail HA interface? (Choose three.)

In the Heartbeat status drop-down list, select Primary

In the Virtual IP action drop-down list, select Use

In the Virtual IP address field, type 172.16.32.55/24

In the Peer IP address field, type 172.16.32.57

Disable Enable port monitor

NEW QUESTION 22
Refer to the exhibits showing SMTP limits (Session Profile – SMTP Limits), and domain settings (Domain Settings, andDomain Settings – Other) of a FortiMail device.

Which message size limit in KB will the FortiMail apply to outbound email?

204300

There is no message size limit for outbound email from a protected domain.

10240

51200

NEW QUESTION 23
Refer to the exhibit which shows a topology diagram of a FortiMail cluster deployment.

Which IP address must the DNS MX record for this organization resolve to?

1172 16 32 57

172.16.32.56

172.16.32.55

172.16.32.1

NEW QUESTION 24
Refer to the exhibits, which display a topology diagram (Topology) and two FortiMail device configurations (FML1 ConfigurationandFML2 Configuration).

What is the expected outcome of SMTP sessions sourced from FML1 and destined for FML2?

FML1 will fail to establish any connection with FML2.

FML1 will attempt to establish an SMTPS session with FML2. but fail and revert to standard SMTP.

FML1 will send the STARTTLS command in the SMTP session, which will be rejected by FML2.

FML1 will successfully establish an SMTPS session with FML2.

NEW QUESTION 25
Exhibit.

Reter to the exhibit, which shows the IBE Encryption page of a FortiMail device. Which user account behavior can you expect from these IBE settings?

After initial registration. IBE users can access the secure portal without authenticating again for 90 days.

Registered IBE users have 90 days from the time they receive a notification email message to access their IBE email.

IBE user accounts will expire after 90 days of inactivity and must register again to access new IBE email message.

First time IBE users must register to access their email within 90 days of receiving the notification email message

NEW QUESTION 26
Refer to the exhibit, which shows an inbound recipient policy.

After creating the policy shown in the exhibit, an administrator discovers that clients can send unauthenticated emails using SMTP.
What must the administrator do to enforce authentication?

Move this incoming recipient policy to the top of the list.

Configure a matching IP policy with the exclusive flag enabled.

Configure an access delivery rule to enforce authentication.

Configure an access receive rule toverifyauthentication status.

NEW QUESTION 27
Which two FortiMail antispam techniques can you use to combat zero-day spam? (Choose two.)

IP reputation

Spam outbreak protection

DNSBL

Behavior analysis

NEW QUESTION 28
Refer to the exhibit, which shows the Authentication Reputation list on a FortiMail device running in gateway mode.

Why was the IP address blocked?

The IP address had consecutive SMTPS login failures to FortiMail..

The IP address had consecutive IMAP login failures to FortiMail.

The IP address had consecutive administrative password failures to FortiMail.

The IP address had consecutive SSH login failures to FortiMail.

NEW QUESTION 29
Refer to the exhibit, which shows the output of an email transmission using a telnet session.

What are two correct observations about this SMTP session? (Choose two.)

The SMTP envelope addresses are different from the message header addresses.

The “Subject” is part of the message header.

The”220 mx. internal, lab ESMTPSmtpd” message is part of the SMTP banner.

The “250Message accepted for delivery” message is part ofthe message body.

NEW QUESTION 30
Refer to the exhibit, which displays a history log entry.

In the Policy ID column, why isthe last policy ID value SYSTEM?

The email was dropped by a system blacklist.

The email matched a system-level authentication policy.

It is an inbound email.

The email did not match a recipient-based policy.

NEW QUESTION 31
Which two antispam techniques query FortiGuard for rating information? (Choose two.)

DNSBL

IP reputation

URL filter

SURBL

NEW QUESTION 32
When configuring a FortiMail HA group consisting of different models, which two statements are true?
(Choose two.)

The most powerful model must be configured as the primary unit.

Group capacity is limited to the least powerful model.

All units must have the same firmware.

Configurations will not synchronize between different model types.

NEW QUESTION 33
Exhibit.

Refer to the exhibit, which shows the mail server settings of a FortiMail device. What are two ways this FortiMail device will handle connections? (Choose two.)

FortiMail will support the STARTTLS extension.

FortiMail will drop any inbound plaintext SMTP connection.

FortiMail will accept SMTPS connections.

FortiMail will enforce SMTPS on all outbound sessions.

NEW QUESTION 34
Refer to the exhibit, which shows a topology diagram of two separate email domains.

Which two statements correctly describe how an email message is delivered from User A to User B? (Choose two.)

mx.example1.org will forward the email message to the MX record that has the lowest preference.

User B will retrieve the email message using either POP3 or IMAP.

User A’s MUA will perform a DNS MX record lookup to send the email message.

The DNS server will act as an intermediary MTA.

NEW QUESTION 35
In which FortiMail configuration object can you assign an outbound session profile?

Outbound recipient policy

Inbound recipient policy

IP policy

Access delivery rule

NEW QUESTION 36
Which statement about how impersonation analysis identifies spoofed email addresses is correct?

It uses behavior analysis to detect spoofed addresses.

It uses DMARC validation to detect spoofed addresses.

It maps the display name to the correct recipient email address

It uses SPF validation to detect spoofed addresses.

NEW QUESTION 37
Refer to the exhibit, which displays an access control rule.

What are two expected behaviors for this access control rule? (Choose two.)