A Review Of High Quality NSE6_FML-6.2 Free Question

NEW QUESTION 1




Which of the following statements are true regarding the transparent mode FortiMail’s email routing for the example.com domain? (Choose two.)

• A. FML-1 will use the built-in MTA for outgoing sessions
• B. FML-1 will use the transparent proxy for incoming sessions
• C. If incoming email are undeliverable, FML-1 can queue them to retry again later
• D. If outgoing email messages are undeliverable, FML-1 can queue them to retry later

Answer: BC

NEW QUESTION 2

What are the configuration steps to enable DKIM signing for outbound messages on FortiMail? (Choose
three.)

• A. Enable DKIM signing for outgoing messages in a matching session profile
• B. Publish the public key as a TXT record in a public DNS server
• C. Enable DKIM check in a matching session profile
• D. Enable DKIM check in a matching antispam profile
• E. Generate a public/private key pair in the protected domain configuration

Answer: ABE

NEW QUESTION 3

Examine the FortMail mail server settings shown in the exhibit; then answer the question below.

Which of the following statements are true? (Choose two.)

• A. mx.example.com will enforce SMTPS on all outbound sessions
• B. mx.example.com will display STARTTLS as one of the supported commands in SMTP sessions
• C. mx.example.com will accept SMTPS connections
• D. mx.example.com will drop any inbound plaintext SMTP connection

Answer: BC

NEW QUESTION 4

Examine the message column of a log cross search result of an inbound email shown in the exhibit; then answer the question below

Based on logs, which of the following statements are true? (Choose two.)

• A. The FortiMail is experiencing issues delivering the email to the back-end mail server
• B. Thelogs were generatedby a server mode FortiMail
• C. The logs were generated by a gateway or transparent mode FortiMail
• D. The FortiMail is experiencing issues accepting the connection from the remote sender

Answer: BD

NEW QUESTION 5

Which two antispam techniques query FortiGuard for rating information? (Choose two.)

• A. DNSBL
• B. SURBL
• C. IP reputation
• D. URI filter

Answer: AB

Explanation:
Reference: https://docs.fortinet.com/document/fortimail/6.4.0/administration-guide/352990/configuring- antispam-profiles-and-antispam-action-profiles

NEW QUESTION 6

Examine the FortiMail active-passive cluster shown in the exhibit; then answer the question below.


Which of the following parameters are recommended for the Primary FortiMail’s HA interface configuration? (Choose three.)

• A. Enable port monitor: disable
• B. Peer IP address: 172.16.32.57
• C. Heartbeat status: Primary
• D. Virtual IP address: 172.16.32.55/24
• E. Virtual IP action: Use

Answer: CDE

NEW QUESTION 7

Refer to the exhibit.

The exhibit shows a FortiMail active-passive setup.
Which three actions are recommended when configuring the primary FortiMail HA interface? (Choose three.)

• A. Disable Enable port monitor
• B. In the Heartbeat status drop-down list, select Primary
• C. In the Peer IP address field, type 172.16.32.57
• D. In the Virtual IP action drop-down list, select Use
• E. In the Virtual IP address field, type 172.16.32.55/24

Answer: ABD

NEW QUESTION 8

While reviewing logs, an administrator discovers that an incoming email was processed using policy IDs 0:4:9.
Which two scenarios will generate this policy ID? (Choose two.)

• A. Email was processed using IP policy ID 4
• B. Incoming recipient policy ID 9 has the exclusive flag set
• C. FortiMail applies the default behavior for relaying inbound email
• D. FortiMail configuration is missing an access delivery rule

Answer: CD

NEW QUESTION 9

Examine the FortiMail IBE service configuration shown in the exhibit; then answer the question below.

Which of the following statements describes the User inactivity expiry time of 90 days?

• A. First time IBE users must register to access their email within 90 days of receiving the notification email message
• B. After initial registration, IBE users can access the secure portal without authenticating again for 90 days
• C. Registered IBE users have 90 days from the time they receive a notification email message to access their IBE email
• D. IBE user accounts will expire after 90 days of inactivity, and must register again to access new IBE email message

Answer: D

NEW QUESTION 10

A FortiMail administrator is investigating a sudden increase in DSNs being delivered to the protected domain for undeliverable email messages. After searching the logs, the administrator identifies that the DSNs were not generated as a result of any outbound email sent from the protected domain.
Which FortiMail antispam technique can the administrator use to prevent this scenario?

• A. Spam outbreak protection
• B. Bounce address tag validation
• C. Spoofed header detection
• D. FortiGuard IP Reputation

Answer: A

Explanation:
Reference:
https://docs.fortinet.com/document/fortimail/6.2.0/administration-guide/769204/managing-the-mail- queue

NEW QUESTION 11

Refer to the exhibit.

Which message size limit will FortiMail apply to the outbound email?

• A. 204800
• B. 1024
• C. 51200
• D. 10240

Answer: A

NEW QUESTION 12

Examine the FortiMail IBE users shown in the exhibit; then answer the question below

Which one of the following statements describes the Pre-registered status of the IBE user krayner@external.com?

• A. The user was registered by an administrator in anticipation of IBE participation
• B. The user has completed the IBE registration process but has not yet accessed their IBE email
• C. The user has received an IBE notification email, but has not accessed the HTTPS URL or attachment yet
• D. The user account has been de-activated, and the user must register again the next time they receive an IBE email

Answer: C

NEW QUESTION 13

An organization has different groups of users with different needs in email functionality, such as address book access, mobile device access, email retention periods, and disk quotas.
Which FortiMail feature specific to server mode can be used to accomplish this?

• A. Resource profiles
• B. Domain-level service settings
• C. Access profiles
• D. Address book management options

Answer: C

NEW QUESTION 14

Examine the FortiMail topology and IP-based policy shown in the exhibit; then answer the question below.

An administrator has enabled the sender reputation feature in the Example_Session profile on FML-1. After a few hours, the deferred queue on the Mail Server started filing up with undeliverable email. What changes should the administrator make to fix this issue? (Choose two.)

• A. Clear the sender reputation database using the CLI
• B. Create an outbound recipient policy to bypass outbound email from session profile inspections
• C. Disable the exclusive flag in IP policy ID 1
• D. Apply a session profile with sender reputation disabled on a separate IP policy for outbound sessions

Answer: BC

NEW QUESTION 15

FortiMail is configured with the protected domain example.com.
Which two envelope addresses will require an access receive rule, to relay for unauthenticated senders? (Choose two.)

• A. MAIL FROM: accounts@example.com RCPT TO: sales@external.org
• B. MAIL FROM: support@example.com RCPT TO: marketing@example.com
• C. MAIL FROM: training@external.org RCPT TO: students@external.org
• D. MAIL FROM: mis@hosted.net RCPT TO: noc@example.com

Answer: BD

NEW QUESTION 16
......