FortiMail is configured with the protected domain "internal.lab".
Which two envelope addresses will need an access control rule to relay e-mail sent for unauthenticated users? (Choose two.)
A. MAIL FROM: [email protected];RCPT TO;[email protected]
B. MAIL FROM: [email protected];RCPT TO;[email protected]
C. MAIL FROM: [email protected];RCPT TO;[email protected]
D. MAIL FROM: student@ internal.lab;RCPT TO;[email protected]
|
Download Printable PDF. VALID exam to help you PASS. |
 |
None of the questions are valid anymore. I attempted today and not even a single question from this.
A, D.
“In the absence of access control rules, the FortiMail unit prevents SMTP clients from using your protected server or
FortiMail unit as an open relay: senders can deliver email incoming to protected domains, but cannot deliver email
outgoing to unprotected domains.
So if you’ll try to use this FortiMail as an open relay (case A), it won’t work without ACL.
AD
https://help.fortinet.com/fmail/5-3-6/admin/index.html#page/FortiMail_Online_Help/policy_09_10.html
If no access control rules are configured, or no matching access control rules exist, and if the SMTP client is not configured to authenticate, the FortiMail unit will perform the default action, which varies by whether or not the recipient email address in the envelope (RCPT TO:) is a member of a protected domain.
For protected domains, the default action is RELAY.
For unprotected domains, the default action is REJECT.
So in order for unprotected domains not being rejected, we have to configure Access Control Rules. In this question , the unprotected domain is “@fortinet.com”
A is weird but A, D is correct.
https://s3.amazonaws.com/fortinetweb/docs.fortinet.com/v2/attachments/ed0d3b8c-243a-11e9-b20a-f8bc1258b856/fortimail-admin-539.pdf