[Jul 13, 2021] Get Free Updates Up to 365 days On Developing NSE6_FML-6.2 Braindumps
Best Quality Fortinet NSE6_FML-6.2 Exam Questions
NEW QUESTION 16
Examine the FortiMail user webmail interface shown in the exhibit; then answer the question below.
Which one of the following statements is true regarding this server mode FortiMail's configuration?
- A. This user's account has a customized access profile applied that allows access to the personal address book
- B. The protected domain-level service settings have been modified to allow access to the domain address book
- C. The administrator has not made any changes to the default address book access privileges
- D. The administrator has configured an inbound recipient policy with a customized resource profile
Answer: B
NEW QUESTION 17
Examine the FortiMail archiving policies shown in the exhibit; then answer the question below.
Which of the following statements is true regarding this configuration? (Choose two.)
- A. Email sent from [email protected] will be archived
- B. Only the [email protected] account will be able to access the archived email
- C. Spam email will be exempt from archiving
- D. Archived email will be saved in the journal account
Answer: A,C
NEW QUESTION 18
Refer to the exhibit.
It is recommended that you configure which three access receive settings to allow outbound email from the example.comdomain on FML-1? (Choose three.)
- A. The Recipient pattern should be set to 10.29.1.45/24
- B. The Enable check box should be cleared
- C. The Action should be set to Relay
- D. The Sender pattern should be set to *@example.com
- E. The Sender IP/netmask should be set to 10.29.1.45/32
Answer: B,C,E
NEW QUESTION 19
Refer to the exhibit.
Which configuration change must you make to block an offending IP address temporarily?
- A. Add the offending IP address to the system block list
- B. Add the offending IP address to the user block list
- C. Add the offending IP address to the domain block list
- D. Change the authentication reputation setting status to Enable
Answer: D
Explanation:
Explanation/Reference: https://help.fortinet.com/fweb/550/Content/FortiWeb/fortiweb-admin/blacklisting.htm
NEW QUESTION 20
Refer to the exhibit.
An administrator must enforce authentication on FML-1 for all outbound email from the example.com domain. Which two settings should be used to configure the access receive rule? (Choose two.)
- A. The Recipient pattern should be set to *@example.com
- B. The Sender IP/netmask should be set to 10.29.1.0/24
- C. The Action should be set to Reject
- D. The Authentication status should be set to Authenticated
Answer: B,D
NEW QUESTION 21
A FortiMail administrator is investigating a sudden increase in DSNs being delivered to the protected domain for undeliverable email messages. After searching the logs, the administrator identifies that the DSNs were not generated as a result of any outbound email sent from the protected domain.
Which FortiMail antispam technique can the administrator use to prevent this scenario?
- A. Spoofed header detection
- B. FortiGuard IP Reputation
- C. Bounce address tag validation
- D. Spam outbreak protection
Answer: D
Explanation:
Explanation/Reference: https://docs.fortinet.com/document/fortimail/6.2.0/administration-guide/769204/managing-the- mail-queue
NEW QUESTION 22
Refer to the exhibit.
Which two statements about the access receive rule are true? (Choose two.)
- A. Senders must be authenticated to match this rule
- B. Email must originate from an example.comemail address to match this rule
- C. Email from any host in the 10.0.1.0/24subnet can match this rule
- D. Email matching this rule will be relayed
Answer: B,D
NEW QUESTION 23 
Which of the following statements are true regarding the transparent mode FortiMail's email routing for the example.com domain? (Choose two.)
- A. If outgoing email messages are undeliverable, FML-1 can queue them to retry later
- B. FML-1 will use the built-in MTA for outgoing sessions
- C. If incoming email are undeliverable, FML-1 can queue them to retry again later
- D. FML-1 will use the transparent proxy for incoming sessions
Answer: C,D
NEW QUESTION 24
Which two antispam techniques query FortiGuard for rating information? (Choose two.)
- A. SURBL
- B. URI filter
- C. DNSBL
- D. IP reputation
Answer: A,C
Explanation:
Explanation/Reference: https://docs.fortinet.com/document/fortimail/6.4.0/administration-guide/352990/configuring- antispam-profiles-and-antispam-action-profiles
NEW QUESTION 25
Examine the FortiMail session profile and protected domain configuration shown in the exhibit; then answer the question below.
Which size limit will FortiMail apply to outbound email?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
NEW QUESTION 26
Refer to the exhibit.
An administrator has enabled the sender reputation feature in the Example_Session profile on FML-1. After a few hours, the deferred queue on the mail server starts filling up with undeliverable email. What two changes must the administrator make to fix this issue? (Choose two.)
- A. Create an outbound recipient policy to bypass outbound email from session profile inspections
- B. Clear the sender reputation database using the CLI
- C. Disable the exclusive flag in IP policy ID 1
- D. Apply a session profile with sender reputation disabled on a separate IP policy for outbound sessions
Answer: C,D
NEW QUESTION 27
Refer to the exhibit.
An administrator must enforce authentication on FML-1 for all outbound email from the example.com domain.
Which two settings should be used to configure the access receive rule? (Choose two.)
- A. The Recipient pattern should be set to *@example.com
- B. The Sender IP/netmask should be set to 10.29.1.0/24
- C. The Action should be set to Reject
- D. The Authentication status should be set to Authenticated
Answer: B,D
Explanation:
Explanation/Reference:
NEW QUESTION 28
Examine the FortiMail IBE service configuration shown in the exhibit; then answer the question below.
Which of the following statements describes the User inactivity expiry time of 90 days?
- A. After initial registration, IBE users can access the secure portal without authenticating again for 90 days
- B. IBE user accounts will expire after 90 days of inactivity, and must register again to access new IBE email message
- C. First time IBE users must register to access their email within 90 days of receiving the notification email message
- D. Registered IBE users have 90 days from the time they receive a notification email message to access their IBE email
Answer: B
NEW QUESTION 29
Which three statements about SMTPS and SMTP over TLS are true? (Choose three.)
- A. SMTPS connections are initiated on port 465
- B. SMTP over TLS connections are entirely encrypted and initiated on port 465
- C. SMTPS encrypts only the body of the email message
- D. SMTPS encrypts the identities of both the sender and receiver
- E. The STARTTLS command is used to initiate SMTP over TLS
Answer: A,D,E
Explanation:
Explanation/Reference: https://docs.fortinet.com/document/fortimail/6.2.0/administration-guide/807960/fortimail- support-of-tls-ssl
NEW QUESTION 30
Refer to the exhibit.
Which two statements about the MTAs of the domain example.com are true? (Choose two.)
- A. The external MTAs will send email to mx.example.com only if mx.hosted.com is unreachable
- B. The primary MTA for the example.com domain is mx.hosted.com
- C. The higher preference value is used to load balance more email to the mx.example.com MTA
- D. The PriNS server should receive all email for the example.com domain
Answer: A,B
NEW QUESTION 31
Refer to the exhibit.
Which two message types will trigger this DLP scan rule? (Choose two.)
- A. An email message with a subject that contains the term "credit card" will trigger this scan rule
- B. An email sent from [email protected] will trigger this scan rule, even without matching any conditions
- C. An email that contains credit card numbers in the body, attachment, and subject will trigger this scan rule
- D. An email message that contains credit card numbers in the body will trigger this scan rule
Answer: C,D
NEW QUESTION 32
Refer to the exhibit.
Which statement describes the impact of setting the User inactivity expiry time option to 90 days?
- A. After initial registration, IBE users can access the secure portal without authenticating again for 90 days
- B. IBE user accounts will expire after 90 days of inactivity, and must register again to access new IBE email message
- C. First time IBE users must register to access their email within 90 days of receiving the notification email message
- D. Registered IBE users have 90 days from the time they receive a notification email message to access their IBE email
Answer: B
Explanation:
Reference: https://docs.fortinet.com/document/fortimail/6.4.0/cli-reference/813529/system-encryption- ibe#config_3733402351_2450215
NEW QUESTION 33
An organization has different groups of users with different needs in email functionality, such as address book access, mobile device access, email retention periods, and disk quotas.
Which FortiMail feature specific to server mode can be used to accomplish this?
- A. Domain-level service settings
- B. Address book management options
- C. Resource profiles
- D. Access profiles
Answer: D
NEW QUESTION 34
Which three statements about SMTPS and SMTP over TLS are true? (Choose three.)
- A. SMTPS connections are initiated on port 465
- B. SMTP over TLS connections are entirely encrypted and initiated on port 465
- C. SMTPS encrypts only the body of the email message
- D. SMTPS encrypts the identities of both the sender and receiver
- E. The STARTTLS command is used to initiate SMTP over TLS
Answer: A,D,E
Explanation:
Reference:
https://docs.fortinet.com/document/fortimail/6.2.0/administration-guide/807960/fortimail-support-of- tls-ssl
NEW QUESTION 35
Which firmware upgrade method for an active-passive HA cluster ensures service outage is minimal, and there are no unnecessary failovers?
- A. Upgrade the standby unit, and then upgrade the active unit
- B. Upgrade both units at the same time
- C. Upgrade the active unit, which will upgrade the standby unit automatically
- D. Break the cluster, upgrade the units independently, and then form the cluster
Answer: B
NEW QUESTION 36
Refer to the exhibit.
Which statement describes the pre-registered status of the IBE user [email protected]?
- A. The user account has been de-activated, and the user must register again the next time they receive an IBE email.
- B. The user was registered by an administrator in anticipation of IBE participation.
- C. The user has received an IBE notification email, but has not accessed the HTTPS URL or attachment yet.
- D. The user has completed the IBE registration process, but has not yet accessed their IBE email.
Answer: D
Explanation:
Reference: https://docs.fortinet.com/document/fortimail/6.4.2/administration-guide/470401/configuring-ibe- users
NEW QUESTION 37
Refer to the exhibit.
Which two statements about how the transparent mode FortiMail device routes email for the example.com domain are true? (Choose two.)
- A. If outgoing email messages are undeliverable, FM-1 can queue them to retry later
- B. FML-1 will use the built-in MTA for outgoing sessions
- C. FML-1 will use the transparent proxy for incoming sessions
- D. If incoming email messages are undeliverable, FML-1 can queue them to retry later
Answer: A,C
NEW QUESTION 38
What are the configuration steps to enable DKIM signing for outbound messages on FortiMail? (Choose three.)
- A. Enable DKIM check in a matching antispam profile
- B. Enable DKIM check in a matching session profile
- C. Publish the public key as a TXT record in a public DNS server
- D. Enable DKIM signing for outgoing messages in a matching session profile
- E. Generate a public/private key pair in the protected domain configuration
Answer: C,D,E
NEW QUESTION 39
Refer to the exhibit.
MTA-1 is delivering an email intended for User 1 to MTA-2.
Which two statements about protocol usage between the devices are true? (Choose two.)
- A. MTA-2 will use IMAP to receive the email message from MTA-1
- B. MTA-1 will use SMTP to deliver the email message to MTA-2
- C. User 1 will uselogs were generatedload the email message from MTA-2
- D. MTA-1 will use POP3 to deliver the email message to User 1 directly
Answer: B,C
NEW QUESTION 40
......
Fortinet Exam Practice Test To Gain Brilliante Result: https://www.vcedumps.com/NSE6_FML-6.2-examcollection.html
