Get Instant Access to NSE6_FML-6.2 Practice Exam Questions [Q24-Q45]

5/5 - (1 vote)

Get Instant Access to NSE6_FML-6.2 Practice Exam Questions

Reliable Study Materials & Testing Engine for NSE6_FML-6.2 Exam Success!

NO.24 Refer to the exhibit.

Which message size limit will FortiMail apply to the outbound email?

204800

1024

51200

10240

Explanation

NO.25 Refer to the exhibit.

It is recommended that you configure which three access receive settings to allow outbound email from the example.com domain on FML-1? (Choose three.)

The Sender pattern should be set to *@example.com

The Action should be set to Relay

The Recipient pattern should be set to 10.29.1.45/24

The Enable check box should be cleared

The Sender IP/netmask should be set to 10.29.1.45/32

NO.26 Refer to the exhibit.

Which configuration change must you make to block an offending IP address temporarily?

Add the offending IP address to the system block list

Add the offending IP address to the user block list

Add the offending IP address to the domain block list

Change the authentication reputation setting status to Enable

NO.27 What IP address should the DNS MX record for this deployment resolve to?

172.16.32.1

172.16.32.57

172.16.32.55

172.16.32.56

NO.28 Refer to the exhibit.

Which two statements about the mail server settings are true? (Choose two.)

FortiMail will support the STARTTLS extension

FortiMail will accept SMTPS connections

FortiMail will drop any inbound plaintext SMTP connection

FortiMail will enforce SMTPS on all outbound sessions

NO.29 Refer to the exhibit.

What are two expected outcomes if FortiMail applies this antivirus action profile to an email? (Choose two.)

Virus content will be removed from the email

A replacement message will be added to the email

The sanitized email will be sent to the recipient’s personal quarantine

The administrator will be notified of the virus detection

NO.30 A FortiMail administrator is investigating a sudden increase in DSNs being delivered to the protected domain for undeliverable email messages. After searching the logs, the administrator identifies that the DSNs were not generated as a result of any outbound email sent from the protected domain.
Which FortiMail antispam technique can the administrator use to prevent this scenario?

Spam outbreak protection

Bounce address tag validation

Spoofed header detection

FortiGuard IP Reputation

Reference:
https://docs.fortinet.com/document/fortimail/6.2.0/administration-guide/769204/managing-the-mail- queue

NO.31 Which three statements about SMTPS and SMTP over TLS are true? (Choose three.)

SMTP over TLS connections are entirely encrypted and initiated on port 465

SMTPS encrypts the identities of both the sender and receiver

The STARTTLS command is used to initiate SMTP over TLS

SMTPS encrypts only the body of the email message

SMTPS connections are initiated on port 465

Reference:
https://docs.fortinet.com/document/fortimail/6.2.0/administration-guide/807960/fortimail-support-of- tls-ssl

NO.32 Examine the FortiMail DLP scan rule shown in the exhibit; then answer the question below.

Which of the following statements is true regarding this configuration? (Choose two.)

An email message containing the words “Credit Card” in the subject will trigger this scan rule

If an email is sent from [email protected] the action will be applied without matching any conditions

An email message containing credit card numbers in the body will trigger this scan rule

An email must contain credit card numbers in the body, attachment, and subject to trigger this scan rule

NO.33 Examine the FortiMail recipient-based policy shown in the exhibit; then answer the question below.

After creating the policy, an administrator discovered that clients are able to send unauthenticated email using SMTP. What must be done to ensure clients cannot send unauthenticated email?

Configure a matching IP policy with SMTP authentication and exclusive flag enabled

Move the recipient policy to the top of the list

Configure an access receive rule to verify authentication status

Configure an access delivery rule to enforce authentication

NO.34 Which two antispam techniques query FortiGuard for rating information? (Choose two.)

DNSBL

SURBL

IP reputation

URI filter

NO.35 Refer to the exhibit.

Which two statements about how the transparent mode FortiMail device routes email for the example.com domain are true? (Choose two.)

If incoming email messages are undeliverable, FML-1 can queue them to retry later

If outgoing email messages are undeliverable, FM-1 can queue them to retry later

FML-1 will use the built-in MTA for outgoing sessions

FML-1 will use the transparent proxy for incoming sessions

NO.36 Which firmware upgrade method for an active-passive HA cluster ensures service outage is minimal, and there are no unnecessary failovers?

Break the cluster, upgrade the units independently, and then form the cluster

Upgrade both units at the same time

Upgrade the standby unit, and then upgrade the active unit

Upgrade the active unit, which will upgrade the standby unit automatically

Reference:
https://docs.fortinet.com/document/fortimail/6.2.0/administration-guide/725928/upgrading-firmware- on-ha-units

NO.37 Which of the following statements are true regarding FortiMail’s behavior when using the built-in MTA to process email in transparent mode? (Choose two.)

FortiMail can queue undeliverable messages and generate DSNs

If you disable the built-in MTA, FortiMail will use its transparent proxies to deliver email

FortiMail ignores the destination set by the sender and uses its own MX record lookup to deliver email

MUAs need to be configured to connect to the built-in MTA to send email

NO.38 Examine the FortiMail DLP scan rule shown in the exhibit; then answer the question below.

Which of the following statements is true regarding this configuration? (Choose two.)

An email message containing the words “Credit Card” in the subject will trigger this scan rule

If an email is sent from [email protected] the action will be applied without matching any conditions

An email message containing credit card numbers in the body will trigger this scan rule

An email must contain credit card numbers in the body, attachment, and subject to trigger this scan rule

NO.39 Refer to the exhibit.

An administrator must enforce authentication on FML-1 for all outbound email from the example.com domain. Which two settings should be used to configure the access receive rule? (Choose two.)

The Recipient pattern should be set to *@example.com

The Authentication status should be set to Authenticated

The Sender IP/netmask should be set to 10.29.1.0/24

The Action should be set to Reject

NO.40 Refer to the exhibit.

Which two message types will trigger this DLP scan rule? (Choose two.)

An email message with a subject that contains the term “credit card” will trigger this scan rule

An email that contains credit card numbers in the body, attachment, and subject will trigger this scan rule

An email message that contains credit card numbers in the body will trigger this scan rule

An email sent from [email protected] will trigger this scan rule, even without matching any conditions

NO.41 Which three statements about SMTPS and SMTP over TLS are true? (Choose three.)

SMTP over TLS connections are entirely encrypted and initiated on port 465

SMTPS encrypts the identities of both the sender and receiver

The STARTTLS command is used to initiate SMTP over TLS

SMTPS encrypts only the body of the email message

SMTPS connections are initiated on port 465

NO.42 Examine the access receive rule shown in the exhibit; then answer the question below.

Which of the following statements are true? (Choose two.)

Email from any host in the 10.0.1.0/24 subnet can match this rule

Senders must be authenticated to match this rule

Email matching this rule will be relayed

Email must originate from an example.com email address to match this rule

NO.43 Refer to the exhibit.

An administrator has enabled the sender reputation feature in the Example_Session profile on FML-1. After a few hours, the deferred queue on the mail server starts filling up with undeliverable email. What two changes must the administrator make to fix this issue? (Choose two.)

Apply a session profile with sender reputation disabled on a separate IP policy for outbound sessions

Clear the sender reputation database using the CLI

Create an outbound recipient policy to bypass outbound email from session profile inspections

Disable the exclusive flag in IP policy ID 1

NO.44 Examine the FortiMail session profile and protected domain configuration shown in the exhibit; then answer the question below.

Which size limit will FortiMail apply to outbound email?

204800

51200

1024

10240

domain only applies to inbound. https://kb.fortinet.com/kb/viewContent.do?externalId=FD31006&sliceId=1

NO.45 Examine the configured routes shown in the exhibit; then answer the question below.

Which interface will FortiMail use to forward an email message destined for 10.1.100.252?