[Jan-2022] Use Real NSE6_FML-6.2 Dumps - 100% Free NSE6_FML-6.2 Exam Dumps
NSE6_FML-6.2 PDF Dumps Exam Questions – Valid NSE6_FML-6.2 Dumps
NEW QUESTION 14
Refer to the exhibit.
Which statement describes the pre-registered status of the IBE user [email protected]?
- A. The user account has been de-activated, and the user must register again the next time they receive an IBE email.
- B. The user has completed the IBE registration process, but has not yet accessed their IBE email.
- C. The user has received an IBE notification email, but has not accessed the HTTPS URL or attachment yet.
- D. The user was registered by an administrator in anticipation of IBE participation.
Answer: B
Explanation:
Explanation/Reference: https://docs.fortinet.com/document/fortimail/6.4.2/administration-guide/470401/configuring-ibe- users
NEW QUESTION 15
What IP address should the DNS MX record for this deployment resolve to?
- A. 172.16.32.56
- B. 172.16.32.1
- C. 172.16.32.55
- D. 172.16.32.57
Answer: C
NEW QUESTION 16
Which of the following antispam techniques queries FortiGuard for rating information? (Choose two.)
- A. SURBL
- B. URI filter
- C. IP reputation
- D. DNSBL
Answer: B,C
NEW QUESTION 17
Examine the access receive rule shown in the exhibit; then answer the question below.
Which of the following statements are true? (Choose two.)
- A. Email from any host in the 10.0.1.0/24 subnet can match this rule
- B. Senders must be authenticated to match this rule
- C. Email matching this rule will be relayed
- D. Email must originate from an example.com email address to match this rule
Answer: C,D
NEW QUESTION 18
A FortiMail is configured with the protected domain example.com.
On this FortiMail, which two envelope addresses are considered incoming? (Choose two.)
- A. MAIL FROM: [email protected] RCPT TO: [email protected]
- B. MAIL FROM: [email protected] RCPT TO: [email protected]
- C. MAIL FROM: [email protected] RCPT TO: [email protected]
- D. MAIL FROM: [email protected] RCPT TO: [email protected]
Answer: C,D
Explanation:
Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/9aa62d26-858d-11ea-9384-00505692583a/FortiMail-6.4.0-Administration_Guide.pdf (30)
NEW QUESTION 19
Refer to the exhibit.
The exhibit shows a FortiMail active-passive setup.
Which three actions are recommended when configuring the primary FortiMail HA interface? (Choose three.)
- A. In the Heartbeat status drop-down list, select Primary
- B. In the Peer IP address field, type 172.16.32.57
- C. In the Virtual IP action drop-down list, select Use
- D. In the Virtual IP address field, type 172.16.32.55/24
- E. Disable Enable port monitor
Answer: A,C,E
NEW QUESTION 20
An administrator sees that an excessive amount of storage space on a FortiMail device is being used up by quarantine accounts for invalid users. The FortiMail is operating in transparent mode.
Which two FortiMail features can the administrator configure to tackle this issue? (Choose two.)
- A. Sender address rate control
- B. Bounce address tag verification
- C. Recipient address verification
- D. Automatic removal of quarantine accounts
Answer: A,D
Explanation:
Explanation/Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/9aa62d26-858d-11ea-
9384-00505692583a/FortiMail-6.4.0-Administration_Guide.pdf (322, 323)
NEW QUESTION 21
Examine the FortiMail IBE users shown in the exhibit; then answer the question below
Which one of the following statements describes the Pre-registered status of the IBE user [email protected]?
- A. The user has completed the IBE registration process but has not yet accessed their IBE email
- B. The user was registered by an administrator in anticipation of IBE participation
- C. The user has received an IBE notification email, but has not accessed the HTTPS URL or attachment yet
- D. The user account has been de-activated, and the user must register again the next time they receive an IBE email
Answer: C
NEW QUESTION 22
Which two antispam techniques query FortiGuard for rating information? (Choose two.)
- A. URI filter
- B. SURBL
- C. DNSBL
- D. IP reputation
Answer: B,C
Explanation:
Reference: https://docs.fortinet.com/document/fortimail/6.4.0/administration-guide/352990/configuring- antispam-profiles-and-antispam-action-profiles
NEW QUESTION 23
An administrator sees that an excessive amount of storage space on a FortiMail device is being used up by quarantine accounts for invalid users. The FortiMail is operating in transparent mode.
Which two FortiMail features can the administrator configure to tackle this issue? (Choose two.)
- A. Sender address rate control
- B. Bounce address tag verification
- C. Recipient address verification
- D. Automatic removal of quarantine accounts
Answer: A,D
NEW QUESTION 24
Examine the FortiMail session profile and protected domain configuration shown in the exhibit; then answer the question below.
Which size limit will FortiMail apply to outbound email?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
Explanation:
domain only applies to inbound. https://kb.fortinet.com/kb/viewContent.do?externalId=FD31006&sliceId=1
NEW QUESTION 25
What three configuration steps are required to enable DKIM signing for outbound messages on FortiMail? (Choose three.)
- A. Enable DKIM check in a matching session profile
- B. Publish the public key as a TXT record in a public DNS server
- C. Enable DKIM check in a matching antispam profile
- D. Generate a public/private key pair in the protected domain configuration
- E. Enable DKIM signing for outgoing messages in a matching session profile
Answer: A,B,D
NEW QUESTION 26
Examine the FortiMail IBE service configuration shown in the exhibit; then answer the question below.
Which of the following statements describes the User inactivity expiry time of 90 days?
- A. Registered IBE users have 90 days from the time they receive a notification email message to access their IBE email
- B. After initial registration, IBE users can access the secure portal without authenticating again for 90 days
- C. First time IBE users must register to access their email within 90 days of receiving the notification email message
- D. IBE user accounts will expire after 90 days of inactivity, and must register again to access new IBE email message
Answer: D
NEW QUESTION 27
What are the configuration steps to enable DKIM signing for outbound messages on FortiMail? (Choose three.)
- A. Enable DKIM check in a matching session profile
- B. Publish the public key as a TXT record in a public DNS server
- C. Enable DKIM check in a matching antispam profile
- D. Enable DKIM signing for outgoing messages in a matching session profile
- E. Generate a public/private key pair in the protected domain configuration
Answer: B,D,E
Explanation:
DKIM Signing for Outbound Email
* To configure DKIM signing for outgoing messages, you must first generate a public and private key pair for the domain
* DKIM signatures are domain specific
* FortiMail generates and stores the private key, and uses it to generate the DKIM signature
- Download the public key and publish to your external DNS server
- Enable sign outgoing messages with a DKIM signature
NEW QUESTION 28
Which three statements about SMTPS and SMTP over TLS are true? (Choose three.)
- A. SMTPS encrypts the identities of both the sender and receiver
- B. SMTP over TLS connections are entirely encrypted and initiated on port 465
- C. SMTPS encrypts only the body of the email message
- D. The STARTTLS command is used to initiate SMTP over TLS
- E. SMTPS connections are initiated on port 465
Answer: A,D,E
Explanation:
Reference:
https://docs.fortinet.com/document/fortimail/6.2.0/administration-guide/807960/fortimail-support-of- tls-ssl
NEW QUESTION 29
Refer to the exhibit.
Which two message types will trigger this DLP scan rule? (Choose two.)
- A. An email that contains credit card numbers in the body, attachment, and subject will trigger this scan rule
- B. An email sent from [email protected] will trigger this scan rule, even without matching any conditions
- C. An email message that contains credit card numbers in the body will trigger this scan rule
- D. An email message with a subject that contains the term "credit card" will trigger this scan rule
Answer: A,C
NEW QUESTION 30
Which of the following statements are true regarding FortiMail's behavior when using the built-in MTA to process email in transparent mode? (Choose two.)
- A. MUAs need to be configured to connect to the built-in MTA to send email
- B. FortiMail can queue undeliverable messages and generate DSNs
- C. If you disable the built-in MTA, FortiMail will use its transparent proxies to deliver email
- D. FortiMail ignores the destination set by the sender and uses its own MX record lookup to deliver email
Answer: C,D
NEW QUESTION 31
Refer to the exhibit.
Which message size limit will FortiMail apply to the outbound email?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
NEW QUESTION 32
Examine the nslookup output shown in the exhibit; then answer the question below.
Identify which of the following statements is true regarding the example.com domain's MTAs. (Choose two.)
- A. The higher preference value is used to load balance more email to the mx.example.com MTA
- B. The PriNS server should receive all email for the example.com domain
- C. The primary MTA for the example.com domain is mx.hosted.com
- D. External MTAs will send email to mx.example.com only if mx.hosted.com is unreachable
Answer: C,D
NEW QUESTION 33
Refer to the exhibit.
The exhibit shows a FortiMail active-passive setup.
Which three actions are recommended when configuring the primary FortiMail HA interface? (Choose three.)
- A. In the Heartbeat status drop-down list, select Primary
- B. In the Peer IP address field, type 172.16.32.57
- C. In the Virtual IP action drop-down list, select Use
- D. In the Virtual IP address field, type 172.16.32.55/24
- E. Disable Enable port monitor
Answer: A,C,E
NEW QUESTION 34
If you are using the built-in MTA to process email in transparent mode, which two statements about FortiMail behavior are true? (Choose two.)
- A. FortiMail ignores the destination set by the sender, and uses its own MX record lookup to deliver email
- B. MUAs need to be configured to connect to the built-in MTA to send email
- C. FortiMail can queue undeliverable messages and generate DSNs
- D. If you disable the built-in MTA, FortiMail will use its transparent proxies to deliver email
Answer: A,C
NEW QUESTION 35
......
Ultimate NSE6_FML-6.2 Guide to Prepare Free Latest Fortinet Practice Tests Dumps: https://www.passexamdumps.com/NSE6_FML-6.2-valid-exam-dumps.html
