Secure Email Gateway quiz answers
These are the answers to the Secure Email Gateway lesson quiz in Fortinet’s free Getting Started in Cybersecurity course, with a short explanation for every question. Getting Started in Cybersecurity is one of the two course options (with Technical Introduction to Cybersecurity) that, together with Introduction to the Threat Landscape, earns the Fortinet Certified Fundamentals (FCF) in Cybersecurity certification.
Course at a glance
- Provider: Fortinet Training Institute
- Cost: Free
- Course: Getting Started in Cybersecurity (15 short lessons, each with a quiz)
- Best for: Sales and non-technical roles that need a high-level view of security technology
- Counts toward: FCF in Cybersecurity (valid 2 years)
- Official course: training.fortinet.com
- Answers reviewed: November 2026
Fortinet updates its question banks from time to time. If you see a question that isn’t listed here, leave a comment with the question and we’ll add it.
Quiz questions and answers
Question 1: Which two methods are used by threat actors to compromise your device when conducting phishing campaigns? (Choose two.)
- Click bait
- An infected thumb drive
- An embedded hyperlink within an email
- An attachment to an email
Why: Phishing emails compromise devices through malicious links and infected attachments.
Question 2: In addition to a spam filter, which two technologies are often a part of secure email gateway (SEG)? (Choose two.)
- Email emulator
- Sandbox
- Antivirus scanner
- Firewall
Why: Secure email gateways usually add antivirus scanning and a sandbox on top of spam filtering.
Question 3: Which option identifies the trend of email spamming and phishing?
- Increasing
- Erratic
- Declining
- Plateaued
Why: Spam and phishing volumes keep increasing.
Question 4: Which technique used by a threat actor is known as phishing?
- Fraudulent messages that target a specific role or person within an organization
- A fraudulent practice of sending emails purporting to be reputable in order to steal personal information
- Irrelevant or inappropriate messages sent on the Internet to a large number of recipients
- An attacker observes websites that a targeted group visits, and herds them into an infected website
Why: Phishing means sending fake emails that look reputable in order to steal personal information.
Question 5: Which challenge caused secure email gateway (SEG) to adopt automation and machine learning?
- Success of click-bait
- Volume of attacks
- Data loss
- Delay in implementing the sender policy framework
Why: The sheer volume of email attacks made manual handling impossible, so SEGs adopted automation and machine learning.
Question 6: Which technique used by a threat actor is known as spam?
- Irrelevant or inappropriate messages sent on the Internet to a large number of recipients
- An attacker observes websites that a targeted group visits, and herds them into an infected website
- Fraudulent messages that target a specific role or person within an organization
- Weaponized emails that claim to come from a legitimate sender
Why: Spam is irrelevant or unwanted messages sent to large numbers of people.
Question 7: Which method did the earliest spam filter use to stop spam?
- Identified specific words or patterns
- Detected illegitimate email addresses
- Detected unusual behaviour
- Tested emails in a sandbox environment
Why: The first spam filters looked for specific words or patterns in messages.
Questions from the older NSE 2 version of this lesson
Fortinet’s earlier NSE 2 course asked these questions on the same topic. They are kept here in case your quiz still shows them.
Question 1: What are spam filters?
- Filters that send automated responses to the sender
- Filters that scan the network for the presence of malware
- A network component that strengthens the authentication method
- Filters that identify specific words or patterns in email messages in order to validate the content of those messages
Why: Spam filters check messages for specific words or patterns to decide whether they are legitimate.
Question 2: What are two characteristics of FortiMail? (Choose two.)
- FortiMail is a next-generation firewall (NGFW).
- FortiMail is a secure email gateway (SEG).
- FortiMail is a sandboxing solution.
- FortiMail integrates with firewalls and sandboxing solutions.
Why: FortiMail is Fortinet’s secure email gateway, and it integrates with firewalls and sandboxing.
Question 3: What are three benefits of FortiMail? (Choose three.)
- FortiMail identifies spam and phishing emails.
- FortiMail filters outgoing traffic to protect valuable data.
- FortiMail integrates with FortiSandbox to identify advanced threats.
- FortiMail provides caching and video stream splitting.
Why: FortiMail catches spam and phishing, filters outgoing mail to protect data and works with FortiSandbox against advanced threats.
Question 4: What is phishing?
- The process of installing a fake firewall instance on the network
- The process of scanning for network vulnerabilities
- The practice of changing user credentials
- The practice of tricking unsuspecting people into revealing sensitive information or to handing over money
Why: Phishing tricks people into revealing sensitive information or handing over money.
Question 5: For which two reasons do you need to deploy Sender Policy Framework (SPF)? (Choose two.)
- SPF scans only the network traffic, and it became a standard in 2014.
- SPF is able to stop unknown threats; firewalls cannot.
- SPF is an email authentication method that detects fake sender addresses and emails.
- SPF secures the network by strengthening the authentication method.
Why: SPF lets a domain publish which servers may send its email, so receiving servers can detect forged sender addresses.
Question 6: Which feature can be added to secure email gateway?
- Data leak prevention (DLP)
- Distributed leak prevention (DLP)
- Data level protection (DLP)
- Data storage processing (DSP)
Why: Data leak prevention (DLP) can be added to a secure email gateway to stop sensitive data leaving by email.
Question 7: What are two benefits of FortiMail integration? (Choose two.)
- FortiMail can be integrated with segmentation firewalls.
- FortiMail does not need to be centrally managed.
- FortiMail does not need to be continually updated.
- FortiMail can be integrated with edge firewalls.
Why: FortiMail can be integrated with both edge and segmentation firewalls.
All Getting Started in Cybersecurity quiz answers
- Endpoint Monitoring quiz answers
- Firewalls quiz answers
- Zero Trust Network Access (ZTNA) quiz answers
- Endpoint Hardening Techniques quiz answers
- Content Filters quiz answers
- SIEM quiz answers
- SOAR quiz answers
- Sandbox quiz answers
- Web Application Firewall (WAF) quiz answers
- SASE quiz answers
- Secure Email Gateway (this page)
- Network Access Control (NAC) quiz answers
- Cloud Service Models quiz answers
- Wi-Fi quiz answers
- SD-WAN quiz answers
Frequently asked questions
Is Getting Started in Cybersecurity free?
Yes. It is free on the Fortinet Training Institute website; you only need a free account.
What is the difference between Getting Started and Technical Introduction to Cybersecurity?
Getting Started in Cybersecurity is a high-level course for sales and non-technical roles. Technical Introduction to Cybersecurity goes deeper and suits people heading into technical IT or security jobs. Either one, plus Introduction to the Threat Landscape, earns the FCF certification.
Did the old Fortinet NSE 2 course change?
Yes. Fortinet replaced the NSE 1–3 courses with the FCF curriculum. Many NSE 2 lesson topics now appear in Getting Started in Cybersecurity, which is why this page includes both the current and the older questions.
Priya Dogra – Certification | Jobs | Internships
One comment
Pingback: Fortinet Endpoint Hardening Techniques Quiz Answers Explained | Priya Dogra