Question 1

Refer to the exhibit showing the history logs from a FortiMail device.

Which FortiMail email security feature can an administrator enable to treat these emails as spam?

Options :

A : DKIM validation in a session profile

B : Sender domain validation in a session profile

C : Impersonation analysis in an antispam profile

D : Soft fail SPF validation in an antispam profile

Answer: C

Question 2

You must analyze an event that happened at 20:37 UTC. One log relevant to the event is extracted from

FortiGate logs:

The devices and the administrator are all located in different time zones Daylight savings time (DST) is

disabled

• The FortiGate is at GMT-1000.

• The FortiAnalyzer is at GMT-0800

• Your browser local time zone is at GMT-03.00

You want to review this log on FortiAnalyzer GUI, what time should you use as a filter?

Options :

A : 20:37:08

B : 10:37:08

C : 17:37:08

D : 12.37:08

Answer: C

Question 3

Refer to the exhibit.

A customer wants FortiClient EMS configured to deploy to 1500 endpoints. The deployment will be integrated

with FortiOS and there is an Active Directory server.

Given the configuration shown in the exhibit, which two statements about the installation are correct? (Choose

two.)

Options :

A : If no client update time is specified on EMS, the user will be able to choose the time of installation if they wish to delay.

B : A client can be eligible for multiple enabled configurations on the EMS server, and one will be chosen based on first priority

C : You can only deploy initial installations to Windows clients.

D : You must use Standard or Enterprise SQL Server rather than the included SQL Server Express

E : The Windows clients only require "File and Printer Sharing0 allowed and the rest is handled by Active Directory group policy

Answer: B,C

Question 4

You want to use the MTA adapter feature on FortiSandbox in an HA-Cluster. Which statement about this solution is true?

Options :

A : The configuration of the MTA Adapter Local Interface is different than on port1.

B : The MTA adapter is only available in the primary node.

C : The MTA adapter mode is only detection mode.

D : The configuration is different than on a standalone device.

Answer: B

Question 5

Refer to the exhibit showing a firewall policy configuration.

To prevent unauthorized access of their cloud assets, an administrator wants to enforce authentication on

firewall policy ID 1.

What change does the administrator need to make?

Options :

A :

B :

C :

D :

Answer: B

Free NSE8_812 Mock Exam – Practice Online Confidently

Buying Options: