Exam NSE8_812 topic 1 question 43 discussion

Actual exam question from Fortinet's NSE8_812

Question #: 43
Topic #: 1

Refer to the exhibits.

Dictionary -

Recipient -

Topology -

The exhibits show a FortiMail network topology, Inbound configuration settings, and a Dictionary Profile.
You are required to integrate a third-party’s host service (srv.thirdparty.com) into the e-mail processing path.
All inbound e-mails must be processed by FortiMail antispam and antivirus with FortiSandbox integration. If the email is clean, FortiMail must forward it to the third-party service, which will send the email back to FortiMail for final delivery. FortiMail must not scan the e-mail again.
Which three configuration tasks must be performed to meet these requirements? (Choose three.)

A. Change the scan order in FML-GW to antispam-sandbox-content
B. Apply the Catch-All profile to the CF_Inbound profile and configure a content action profile to deliver to the srv.thirdparty.com FQDN
C. Create an access receive rule with a Sender value of srv.thirdparty.com, Recipient value of *@acme.com, and action value of Safe
D. Apply the Catch-All profile to the AS_Inbound profile and configure an access delivery rule to deliver to the 100.64.0.72 host
E. Create an IP policy with a Source value of 100.64.0.72/32, enable precedence, and place the policy at the top of the list

Show Suggested Answer

Suggested Answer: ABE 🗳️

by ama6 at Sept. 24, 2023, 5:08 p.m.

Comments

Submit Cancel

b4eri

4 months ago

Selected Answer: ABE

ABE is correct

upvoted 1 times

...

kinge2

8 months, 1 week ago

Selected Answer: ADE

https://docs.fortinet.com/document/fortimail/7.4.0/cookbook/427676/configuring-the-inbound-policy-for-weighted-analysis

upvoted 1 times

...

ama6

1 year, 8 months ago

ABE is correct

upvoted 3 times

...

ama6

1 year, 8 months ago

The other options are not necessary to meet the requirements. Option C is not necessary because the access receive rule will already allow emails from the third-party service to be received by FortiMail. Option D is not necessary because the Catch-All profile already allows emails to be delivered to any destination. Here are some additional details about integrating a third-party service into the FortiMail email processing path: The third-party service must be able to receive emails from FortiMail and send them back to FortiMail. The third-party service must be able to communicate with FortiMail using the SMTP protocol. The third-party service must be able to authenticate with FortiMail using the SMTP AUTH protocol. Once the third-party service is integrated into the FortiMail email processing path, all inbound emails will be processed by FortiMail as usual. If the email is clean, FortiMail will forward it to the third-party service. The third-party service will then send the email back to FortiMail for final delivery. FortiMail will not scan the email again.

upvoted 1 times

...