VCEDumps NSE6_FML-6.2 Real Exam Question Answers Updated [Dec 22, 2021]
Easily To Pass New Fortinet NSE6_FML-6.2 Dumps with 52 Questions
NEW QUESTION 18
Examine the nslookup output shown in the exhibit; then answer the question below.
Identify which of the following statements is true regarding the example.com domain's MTAs. (Choose two.)
- A. External MTAs will send email to mx.example.com only if mx.hosted.com is unreachable
- B. The higher preference value is used to load balance more email to the mx.example.com MTA
- C. The PriNS server should receive all email for the example.com domain
- D. The primary MTA for the example.com domain is mx.hosted.com
Answer: A,D
NEW QUESTION 19
While testing outbound MTA functionality, an administrator discovers that all outbound email is being processed using policy IDs 1:2:0.
Which two reasons explain why the last policy ID value is 0? (Choose two.)
- A. There are no access delivery rules configured for outbound email
- B. IP policy ID 2 has the exclusive flag set
- C. There are no outgoing recipient policies configured
- D. Outbound email is being rejected
Answer: A,C
NEW QUESTION 20
Examine the access receive rule shown in the exhibit; then answer the question below.
Which of the following statements are true? (Choose two.)
- A. Email from any host in the 10.0.1.0/24 subnet can match this rule
- B. Email must originate from an example.com email address to match this rule
- C. Senders must be authenticated to match this rule
- D. Email matching this rule will be relayed
Answer: B,D
NEW QUESTION 21
Refer to the exhibit.
Which two statements about the mail server settings are true? (Choose two.)
- A. FortiMail will drop any inbound plaintext SMTP connection
- B. FortiMail will enforce SMTPS on all outbound sessions
- C. FortiMail will support the STARTTLS extension
- D. FortiMail will accept SMTPS connections
Answer: A,D
NEW QUESTION 22
Refer to the exhibit.
An administrator has enabled the sender reputation feature in the Example_Session profile on FML-1. After a few hours, the deferred queue on the mail server starts filling up with undeliverable email. What two changes must the administrator make to fix this issue? (Choose two.)
- A. Clear the sender reputation database using the CLI
- B. Disable the exclusive flag in IP policy ID 1
- C. Create an outbound recipient policy to bypass outbound email from session profile inspections
- D. Apply a session profile with sender reputation disabled on a separate IP policy for outbound sessions
Answer: B,D
NEW QUESTION 23
Refer to the exhibit.
An administrator has enabled the sender reputation feature in the Example_Session profile on FML-1. After a few hours, the deferred queue on the mail server starts filling up with undeliverable email. What two changes must the administrator make to fix this issue? (Choose two.)
- A. Clear the sender reputation database using the CLI
- B. Disable the exclusive flag in IP policy ID 1
- C. Create an outbound recipient policy to bypass outbound email from session profile inspections
- D. Apply a session profile with sender reputation disabled on a separate IP policy for outbound sessions
Answer: B,D
NEW QUESTION 24
Which three statements about SMTPS and SMTP over TLS are true? (Choose three.)
- A. SMTPS encrypts only the body of the email message
- B. SMTP over TLS connections are entirely encrypted and initiated on port 465
- C. SMTPS connections are initiated on port 465
- D. SMTPS encrypts the identities of both the sender and receiver
- E. The STARTTLS command is used to initiate SMTP over TLS
Answer: C,D,E
Explanation:
Reference:
https://docs.fortinet.com/document/fortimail/6.2.0/administration-guide/807960/fortimail-support-of- tls-ssl
NEW QUESTION 25
Refer to the exhibit.
An administrator must enforce authentication on FML-1 for all outbound email from the example.com domain.
Which two settings should be used to configure the access receive rule? (Choose two.)
- A. The Recipient pattern should be set to *@example.com
- B. The Authentication status should be set to Authenticated
- C. The Action should be set to Reject
- D. The Sender IP/netmask should be set to 10.29.1.0/24
Answer: B,D
Explanation:
Explanation/Reference:
NEW QUESTION 26
Which two CLI commands, if executed, will erase all data on the log disk partition? (Choose two.)
- A. execute formatlogdisk
- B. execute formatmaildisk
- C. execute partitionlogdisk 40
- D. execute formatmaildisk_backup
Answer: A,C
Explanation:
Reference: https://docs.fortinet.com/document/fortimail/6.2.0/cli-reference/588825/formatlogdisk
NEW QUESTION 27
Examine the FortiMail topology and IP-based policy shown in the exhibit; then answer the question below.
An administrator has enabled the sender reputation feature in the Example_Session profile on FML-1. After a few hours, the deferred queue on the Mail Server started filing up with undeliverable email. What changes should the administrator make to fix this issue? (Choose two.)
- A. Clear the sender reputation database using the CLI
- B. Disable the exclusive flag in IP policy ID 1
- C. Apply a session profile with sender reputation disabled on a separate IP policy for outbound sessions
- D. Create an outbound recipient policy to bypass outbound email from session profile inspections
Answer: B,D
NEW QUESTION 28
Refer to the exhibit.
MTA-1 is delivering an email intended for User 1 to MTA-2.
Which two statements about protocol usage between the devices are true? (Choose two.)
- A. MTA-2 will use IMAP to receive the email message from MTA-1
- B. User 1 will uselogs were generatedload the email message from MTA-2
- C. MTA-1 will use POP3 to deliver the email message to User 1 directly
- D. MTA-1 will use SMTP to deliver the email message to MTA-2
Answer: B,D
NEW QUESTION 29 
What IP address should the DNS MX record for this deployment resolve to?
- A. 172.16.32.55
- B. 172.16.32.57
- C. 172.16.32.1
- D. 172.16.32.56
Answer: A
NEW QUESTION 30
Refer to the exhibit.
Which statement describes the impact of setting the User inactivity expiry time option to 90 days?
- A. Registered IBE users have 90 days from the time they receive a notification email message to access their IBE email
- B. First time IBE users must register to access their email within 90 days of receiving the notification email message
- C. IBE user accounts will expire after 90 days of inactivity, and must register again to access new IBE email message
- D. After initial registration, IBE users can access the secure portal without authenticating again for 90 days
Answer: C
Explanation:
Reference: https://docs.fortinet.com/document/fortimail/6.4.0/cli-reference/813529/system-encryption- ibe#config_3733402351_2450215
NEW QUESTION 31
Which FortiMail option removes embedded code components in Microsoft Word, while maintaining the original file format?
- A. Content disarm and reconstruction
- B. Impersonation analysis
- C. Behavior analysis
- D. Header analysis
Answer: A
Explanation:
Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/8c063dd3-bafe-11e9- a989-00505692583a/fortimail-admin-620.pdf (435)
NEW QUESTION 32
Examine the FortiMail IBE service configuration shown in the exhibit; then answer the question below.
Which of the following statements describes the User inactivity expiry time of 90 days?
- A. Registered IBE users have 90 days from the time they receive a notification email message to access their IBE email
- B. First time IBE users must register to access their email within 90 days of receiving the notification email message
- C. IBE user accounts will expire after 90 days of inactivity, and must register again to access new IBE email message
- D. After initial registration, IBE users can access the secure portal without authenticating again for 90 days
Answer: C
NEW QUESTION 33
If you are using the built-in MTA to process email in transparent mode, which two statements about FortiMail behavior are true? (Choose two.)
- A. MUAs need to be configured to connect to the built-in MTA to send email
- B. FortiMail ignores the destination set by the sender, and uses its own MX record lookup to deliver email
- C. FortiMail can queue undeliverable messages and generate DSNs
- D. If you disable the built-in MTA, FortiMail will use its transparent proxies to deliver email
Answer: B,C
NEW QUESTION 34
Refer to the exhibit.
What are two expected outcomes if FortiMail applies this antivirus action profile to an email? (Choose two.)
- A. A replacement message will be added to the email
- B. The sanitized email will be sent to the recipient's personal quarantine
- C. The administrator will be notified of the virus detection
- D. Virus content will be removed from the email
Answer: A,B
NEW QUESTION 35
Refer to the exhibit.
What two archiving actions will FortiMail take when email messages match these archive policies? (Choose two.)
- A. FortiMail will exempt spam email from archiving
- B. FortiMail will save archived email in the journal account
- C. FortiMail will allow only the [email protected] account to access the archived email
- D. FortiMail will archive email sent from [email protected]
Answer: B,C
NEW QUESTION 36
Examine the FortiMail recipient-based policy shown in the exhibit; then answer the question below.
After creating the policy, an administrator discovered that clients are able to send unauthenticated email using SMTP. What must be done to ensure clients cannot send unauthenticated email?
- A. Configure a matching IP policy with SMTP authentication and exclusive flag enabled
- B. Configure an access receive rule to verify authentication status
- C. Configure an access delivery rule to enforce authentication
- D. Move the recipient policy to the top of the list
Answer: A
NEW QUESTION 37
While reviewing logs, an administrator discovers that an incoming email was processed using policy IDs
0:4:9.
Which two scenarios will generate this policy ID? (Choose two.)
- A. Email was processed using IP policy ID 4
- B. FortiMail applies the default behavior for relaying inbound email
- C. Incoming recipient policy ID 9 has the exclusive flag set
- D. FortiMail configuration is missing an access delivery rule
Answer: B,D
NEW QUESTION 38
Examine the FortiMail topology and access receive rule shown in the exhibit; then answer the question below.
An administrator must enforce authentication on FML-1 for all outbound email from the example.com domain. Which of the following settings should be used to configure the access receive rule? (Choose two.)
- A. The Authentication status should be set to Authenticated
- B. The Recipient pattern should be set o *@example.com
- C. The Action should be set to Reject
- D. The Sender IP/netmask should be set to 10.29.1.0/24
Answer: A,D
NEW QUESTION 39
Examine the FortiMail IBE users shown in the exhibit; then answer the question below
Which one of the following statements describes the Pre-registered status of the IBE user [email protected]?
- A. The user was registered by an administrator in anticipation of IBE participation
- B. The user account has been de-activated, and the user must register again the next time they receive an IBE email
- C. The user has completed the IBE registration process but has not yet accessed their IBE email
- D. The user has received an IBE notification email, but has not accessed the HTTPS URL or attachment yet
Answer: D
NEW QUESTION 40
Which firmware upgrade method for an active-passive HA cluster ensures service outage is minimal, and there are no unnecessary failovers?
- A. Upgrade the active unit, which will upgrade the standby unit automatically
- B. Upgrade the standby unit, and then upgrade the active unit
- C. Upgrade both units at the same time
- D. Break the cluster, upgrade the units independently, and then form the cluster
Answer: C
NEW QUESTION 41
......
Latest NSE6_FML-6.2 Study Guides 2021 - With Test Engine PDF: https://www.vcedumps.com/NSE6_FML-6.2-examcollection.html
