FCP FortiMail study guide
FCP FortiMail · Work through your exam, one topic at a time.
The Fortinet Certified Professional (FCP) - FortiMail credential is a vendor certification for IT and security professionals who deploy, operate, and troubleshoot FortiMail secure email gateways. It suits mail administrators, network security engineers, SOC analysts handling email threats, and consultants who implement gateway, transparent, or server-mode deployments for organizations. The FCP FortiMail study guide has 6 sections and about 2,544 words.
01Deployment and Initial Configuration
The Deployment and Initial Configuration domain tests whether you can choose the right FortiMail operating mode and build a working base configuration: interfaces, DNS, administrator access, mail domains, and the first policies. Expect scenario questions about gateway versus transparent versus server mode, and about which settings must exist before mail flows.
428 words, about 2 min02Email Routing and Delivery
The Email Routing and Delivery domain tests policy evaluation and mail flow: how FortiMail decides to accept, relay, deliver, quarantine, or reject a message. You need to know the difference between access control rules and recipient policies, how relay hosts and destinations are used, and how to prevent loops.
430 words, about 2 min03Antispam, Antivirus, and Content Filtering
This domain tests layered message inspection: which engine catches which threat, how profiles are attached, and what each action does. Questions often describe a message that was tagged, quarantined, delayed, or delivered despite a filter, and ask you to identify the cause.
411 words, about 2 min04Authentication, Encryption, and Data Loss Prevention
This domain tests trust and confidentiality controls: authenticating senders, validating recipients, encrypting mail in transit or end-to-end, and stopping sensitive data from leaving. Expect questions that distinguish authentication from authorization, TLS from message encryption, and DLP from antivirus.
425 words, about 2 min05Monitoring, Logging, and Reporting
This domain tests operational visibility: finding a message, proving what happened to it, and producing reports. You need to know log types, message tracking, quarantine workflow, and where logs are stored.
382 words, about 2 min06High Availability, Backup, and Troubleshooting
This domain tests resilience and recovery: building an HA pair, backing up the right data, and isolating faults without guesswork. Questions often ask what fails over, what is synchronized, or which evidence to collect first.
468 words, about 2 min