FortiGate Interview Questions & Answers

Question 1. When Inspecting And Delivering Mail Messages, Which Steps Could Be Taken By A Fortimail Unit Operating In Transparent Mode?

Answer :

• Inspect for viruses.
• Inspect content of the message payload.
• Inspect for spam.
• Perform a routing lookup to decide the next hop MTA.

Question 2. What Is The Method Does The Fortigate Unit Use To Determine The Availability Of A Web Cache Using Web Cache Communication Protocol (wccp)?

Answer :

The web cache sends an “I see you” message which is captured by the FortiGate unit.

Question 3. Wan Optimization Is Configured In Active/passive Mode, When Will The Remote Peer Accept An Attempt To Initiate A Tunnel?

Answer :

The attempt will be accepted when there is a matching WAN optimization passive rule.

Question 4. How Can A Fortimail Administrator Retrieve Email Account Information From An Ldap Server Instead Of Configuring This Data Manually On The Unit?

Answer :

Configure the LDAP profile sections “User query options” and “Authentication” then associate the profile to the domain that is locally configured.

Question 5. Which Operation Is Performed By The Forged Ip Scanning Technique?

Answer :

DNS PTR record lookup on the sender’s IP address then A record lookup on the canonical hostname.

Question 6. Which Operational Modes Support High Availability?

Answer :

• Transparent Mode.
• Gateway Mode.
• Server Mode.

Question 7. Which Smtp Sessions Are Defined As Outgoing?

Answer :

SMTP messages destined for servers that are NOT protected domains.

Question 8. When Using Sender Reputation On A Fortimail Unit, Which Actions Can Be Taken Against A Source Ip Address Generating Spam Or Invalid Email Messages?

Answer :

• Delay the email messages from that source IP address with a temporary fail.
• Reject the email messages from that source IP address with a permanent fail.
• Quarantine all the email messages from that source IP address

Question 9. On A Fortimail Unit Operating In Transparent Mode,which Parameters Determines The Direction Of An Smtp Session?

Answer :

The destination IP address.

Question 10. Which History Log Field Indicates The Action Taken By The Fortimail Unit Regarding A Specific Email?

Answer :

Disposition.

Question 11. An Email Message Received By The Fortimail Unit Is Subject To The Bounce Verification Antispam Check Under Which Circumstances?

Answer :

• The envelope MAIL FROM field contains a null reverse-path.
• A Bounce Verification key is created and activated.

Question 12. Which High Availability Mode Should An Administrator Choose To Provide Increased Processing Capabilities?

Answer :

Config-Only.

Question 13. An Administrator Of A Fortimail Unit Operating In Server Mode Has Been Given The Requirement To Configure Disk Quotas For All The Users Of A Specific Domain. How Can The Administrator Achieve This Requirement?

Answer :

Define a disk quota value in a Resource Profile..

Question 14. Which Operational Mode Allows The Fortimail Unit To Operate As A Full Featured Mail Server Rather Than Just A Mail Relay Agent?

Answer :

Server Mode.

Question 15. What Is One Reason For Deploying A Fortimail Unit In Transparent Mode?

Answer :

DNS records do not necessarily have to be modified.

Question 16. Which Profile Can Be Used To Protect Against Denial Of Service Attacks?

Answer :

session profile. 

Question 17. Which Smtp Sessions Are Defined As Incoming?

Answer :

SMTP sessions for the protected domain.

Question 18. Which Back-end Servers Can Be Used To Provide Recipient Verification?

Answer :

• LDAP servers.
• SMTP servers.

Question 19. A System Administrator Is Concerned By The Amount Of Disk Space Being Used To Store Quarantine Email Messages For Non-existent Accounts. Which Techniques Can Be Used On A Fortimail Unit To Prevent Email Messages From Being Quarantined For Non-existent Accounts?

Answer :

Recipient Address Verification..

Question 20. In The Local Storage Structure Of The Fortimail Unit, What Does The Flash Memory Contain?

Answer :

• Firmware Image.
• System Configuration.
• Certificates.

Question 21. When The Domainkeys Identified Mail (dkim) Feature Is Used, Where Is The Public Key Stored?

Answer :

The public key is stored in the DNS TXT record.