Updated Free Fortinet NSE6_FML-6.2 Test Engine Questions with 52 Q&As
The Best NSE 6 Network Security Specialist NSE6_FML-6.2 Professional Exam Questions
NEW QUESTION 11
Which three statements about SMTPS and SMTP over TLS are true? (Choose three.)
- A. SMTPS encrypts only the body of the email message
- B. SMTP over TLS connections are entirely encrypted and initiated on port 465
- C. SMTPS connections are initiated on port 465
- D. SMTPS encrypts the identities of both the sender and receiver
- E. The STARTTLS command is used to initiate SMTP over TLS
Answer: C,D,E
Explanation:
Reference:
https://docs.fortinet.com/document/fortimail/6.2.0/administration-guide/807960/fortimail-support-of- tls-ssl
NEW QUESTION 12
Examine the access receive rule shown in the exhibit; then answer the question below.
Which of the following statements are true? (Choose two.)
- A. Email from any host in the 10.0.1.0/24 subnet can match this rule
- B. Email must originate from an example.com email address to match this rule
- C. Senders must be authenticated to match this rule
- D. Email matching this rule will be relayed
Answer: B,D
NEW QUESTION 13
What three configuration steps are required to enable DKIM signing for outbound messages on FortiMail?
(Choose three.)
- A. Generate a public/private key pair in the protected domain configuration
- B. Enable DKIM check in a matching antispam profile
- C. Publish the public key as a TXT record in a public DNS server
- D. Enable DKIM check in a matching session profile
- E. Enable DKIM signing for outgoing messages in a matching session profile
Answer: A,C,D
NEW QUESTION 14
Examine the FortiMail IBE service configuration shown in the exhibit; then answer the question below.
Which of the following statements describes the User inactivity expiry time of 90 days?
- A. Registered IBE users have 90 days from the time they receive a notification email message to access their IBE email
- B. First time IBE users must register to access their email within 90 days of receiving the notification email message
- C. IBE user accounts will expire after 90 days of inactivity, and must register again to access new IBE email message
- D. After initial registration, IBE users can access the secure portal without authenticating again for 90 days
Answer: C
NEW QUESTION 15
Examine the FortiMail antivirus action profile shown in the exhibit; then answer the question below.
What is the expected outcome if FortiMail applies this action profile to an email? (Choose two.)
- A. Virus content will be removed from the email
- B. A replacement message will be added to the email
- C. The administrator will be notified of the virus detection
- D. The sanitized email will be sent to the recipient's personal quarantine
Answer: A,B
NEW QUESTION 16
Refer to the exhibit.
An administrator must enforce authentication on FML-1 for all outbound email from the example.com domain. Which two settings should be used to configure the access receive rule? (Choose two.)
- A. The Recipient pattern should be set to *@example.com
- B. The Authentication status should be set to Authenticated
- C. The Action should be set to Reject
- D. The Sender IP/netmask should be set to 10.29.1.0/24
Answer: B,D
NEW QUESTION 17
Refer to the exhibit.
Which two statements about the mail server settings are true? (Choose two.)
- A. FortiMail will drop any inbound plaintext SMTP connection
- B. FortiMail will enforce SMTPS on all outbound sessions
- C. FortiMail will support the STARTTLS extension
- D. FortiMail will accept SMTPS connections
Answer: A,D
NEW QUESTION 18
Refer to the exhibit.
Which configuration change must you make to block an offending IP address temporarily?
- A. Change the authentication reputation setting status to Enable
- B. Add the offending IP address to the domain block list
- C. Add the offending IP address to the user block list
- D. Add the offending IP address to the system block list
Answer: A
Explanation:
Explanation/Reference: https://help.fortinet.com/fweb/550/Content/FortiWeb/fortiweb-admin/blacklisting.htm
NEW QUESTION 19
Which two antispam techniques query FortiGuard for rating information? (Choose two.)
- A. IP reputation
- B. URI filter
- C. SURBL
- D. DNSBL
Answer: C,D
Explanation:
Reference: https://docs.fortinet.com/document/fortimail/6.4.0/administration-guide/352990/configuring- antispam-profiles-and-antispam-action-profiles
NEW QUESTION 20
Examine the FortiMail topology and access receive rule shown in the exhibit; then answer the question below.
An administrator must enforce authentication on FML-1 for all outbound email from the example.com domain. Which of the following settings should be used to configure the access receive rule? (Choose two.)
- A. The Authentication status should be set to Authenticated
- B. The Recipient pattern should be set o *@example.com
- C. The Action should be set to Reject
- D. The Sender IP/netmask should be set to 10.29.1.0/24
Answer: A,D
NEW QUESTION 21
Examine the FortiMail recipient-based policy shown in the exhibit; then answer the question below.
After creating the policy, an administrator discovered that clients are able to send unauthenticated email using SMTP. What must be done to ensure clients cannot send unauthenticated email?
- A. Configure a matching IP policy with SMTP authentication and exclusive flag enabled
- B. Configure an access receive rule to verify authentication status
- C. Configure an access delivery rule to enforce authentication
- D. Move the recipient policy to the top of the list
Answer: A
NEW QUESTION 22
Refer to the exhibit.
An administrator must enforce authentication on FML-1 for all outbound email from the example.com domain.
Which two settings should be used to configure the access receive rule? (Choose two.)
- A. The Recipient pattern should be set to *@example.com
- B. The Authentication status should be set to Authenticated
- C. The Action should be set to Reject
- D. The Sender IP/netmask should be set to 10.29.1.0/24
Answer: B,D
Explanation:
Explanation/Reference:
NEW QUESTION 23 
Which of the following statements are true regarding the transparent mode FortiMail's email routing for the example.com domain? (Choose two.)
- A. FML-1 will use the transparent proxy for incoming sessions
- B. If outgoing email messages are undeliverable, FML-1 can queue them to retry later
- C. If incoming email are undeliverable, FML-1 can queue them to retry again later
- D. FML-1 will use the built-in MTA for outgoing sessions
Answer: A,C
NEW QUESTION 24
Refer to the exhibit.
An administrator has enabled the sender reputation feature in the Example_Session profile on FML-1. After a few hours, the deferred queue on the mail server starts filling up with undeliverable email. What two changes must the administrator make to fix this issue? (Choose two.)
- A. Clear the sender reputation database using the CLI
- B. Disable the exclusive flag in IP policy ID 1
- C. Create an outbound recipient policy to bypass outbound email from session profile inspections
- D. Apply a session profile with sender reputation disabled on a separate IP policy for outbound sessions
Answer: B,D
NEW QUESTION 25
An administrator sees that an excessive amount of storage space on a FortiMail device is being used up by quarantine accounts for invalid users. The FortiMail is operating in transparent mode.
Which two FortiMail features can the administrator configure to tackle this issue? (Choose two.)
- A. Sender address rate control
- B. Recipient address verification
- C. Bounce address tag verification
- D. Automatic removal of quarantine accounts
Answer: A,D
Explanation:
Explanation/Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/9aa62d26-858d-11ea-
9384-00505692583a/FortiMail-6.4.0-Administration_Guide.pdf (322, 323)
NEW QUESTION 26
Refer to the exhibit.
Which message size limit will FortiMail apply to the outbound email?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
NEW QUESTION 27
FortiMail is configured with the protected domain example.com.
Which two envelope addresses will require an access receive rule, to relay for unauthenticated senders?
(Choose two.)
- A. MAIL FROM: [email protected] RCPT TO: [email protected]
- B. MAIL FROM: [email protected] RCPT TO: [email protected]
- C. MAIL FROM: [email protected] RCPT TO: [email protected]
- D. MAIL FROM: [email protected] RCPT TO: [email protected]
Answer: A,C
NEW QUESTION 28
Refer to the exhibit.
It is recommended that you configure which three access receive settings to allow outbound email from the example.comdomain on FML-1? (Choose three.)
- A. The Action should be set to Relay
- B. The Enable check box should be cleared
- C. The Sender pattern should be set to *@example.com
- D. The Recipient pattern should be set to 10.29.1.45/24
- E. The Sender IP/netmask should be set to 10.29.1.45/32
Answer: A,B,E
NEW QUESTION 29
Refer to the exhibit.
Which statement describes the pre-registered status of the IBE user [email protected]?
- A. The user was registered by an administrator in anticipation of IBE participation.
- B. The user account has been de-activated, and the user must register again the next time they receive an IBE email.
- C. The user has received an IBE notification email, but has not accessed the HTTPS URL or attachment yet.
- D. The user has completed the IBE registration process, but has not yet accessed their IBE email.
Answer: D
Explanation:
Explanation/Reference: https://docs.fortinet.com/document/fortimail/6.4.2/administration-guide/470401/configuring-ibe- users
NEW QUESTION 30
Which FortiMail option removes embedded code components in Microsoft Word, while maintaining the original file format?
- A. Content disarm and reconstruction
- B. Impersonation analysis
- C. Behavior analysis
- D. Header analysis
Answer: A
Explanation:
Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/8c063dd3-bafe-11e9- a989-00505692583a/fortimail-admin-620.pdf (435)
NEW QUESTION 31
Refer to the exhibit.
Which two statements about the MTAs of the domain example.com are true? (Choose two.)
- A. The higher preference value is used to load balance more email to the mx.example.com MTA
- B. The PriNS server should receive all email for the example.com domain
- C. The external MTAs will send email to mx.example.com only if mx.hosted.com is unreachable
- D. The primary MTA for the example.com domain is mx.hosted.com
Answer: C,D
NEW QUESTION 32
Refer to the exhibit.
It is recommended that you configure which three access receive settings to allow outbound email from the example.com domain on FML-1? (Choose three.)
- A. The Action should be set to Relay
- B. The Enable check box should be cleared
- C. The Sender pattern should be set to *@example.com
- D. The Recipient pattern should be set to 10.29.1.45/24
- E. The Sender IP/netmask should be set to 10.29.1.45/32
Answer: A,B,E
NEW QUESTION 33
......
Try 100% Updated NSE6_FML-6.2 Exam Questions [2022]: https://www.testpassking.com/NSE6_FML-6.2-exam-testking-pass.html