Fortinet NSE6_FML-6.2 Free Practice Questions

NEW QUESTION 1

An administrator sees that an excessive amount of storage space on a FortiMail device is being used up by quarantine accounts for invalid users. The FortiMail is operating in transparent mode.
Which two FortiMail features can the administrator configure to tackle this issue? (Choose two.)

• A. Automatic removal of quarantine accounts
• B. Recipient address verification
• C. Bounce address tag verification
• D. Sender address rate control

Answer: AD

Explanation:
Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/9aa62d26-858d-11ea-9384-00505692583a/FortiMail-6.4.0-Administration_Guide.pdf (322, 323)

NEW QUESTION 2

Examine the message column of a log cross search result of an inbound email shown in the exhibit; then answer the question below

Based on logs, which of the following statements are true? (Choose two.)

• A. The FortiMail is experiencing issues delivering the email to the back-end mail server
• B. Thelogs were generatedby a server mode FortiMail
• C. The logs were generated by a gateway or transparent mode FortiMail
• D. The FortiMail is experiencing issues accepting the connection from the remote sender

Answer: BD

NEW QUESTION 3

Refer to the exhibit.

Which message size limit will FortiMail apply to the outbound email?

• A. 204800
• B. 1024
• C. 51200
• D. 10240

Answer: A

NEW QUESTION 4

Which FortiMail option removes embedded code components in Microsoft Word, while maintaining the original file format?

• A. Behavior analysis
• B. Impersonation analysis
• C. Content disarm and reconstruction
• D. Header analysis

Answer: C

Explanation:
Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/8c063dd3-bafe-11e9- a989-00505692583a/fortimail-admin-620.pdf (435)

NEW QUESTION 5

Refer to the exhibit.

Which two statements about the access receive rule are true? (Choose two.)

• A. Email matching this rule will be relayed
• B. Email must originate from an example.com email address to match this rule
• C. Senders must be authenticated to match this rule
• D. Email from any host in the 10.0.1.0/24 subnet can match this rule

Answer: AB

NEW QUESTION 6

Refer to the exhibit.

An administrator has enabled the sender reputation feature in the Example_Session profile on FML-1. After a few hours, the deferred queue on the mail server starts filling up with undeliverable email. What two changes must the administrator make to fix this issue? (Choose two.)

• A. Apply a session profile with sender reputation disabled on a separate IP policy for outbound sessions
• B. Clear the sender reputation database using the CLI
• C. Create an outbound recipient policy to bypass outbound email from session profile inspections
• D. Disable the exclusive flag in IP policy ID 1

Answer: AD

NEW QUESTION 7

Examine the FortiMail active-passive cluster shown in the exhibit; then answer the question below.


Which of the following parameters are recommended for the Primary FortiMail’s HA interface configuration? (Choose three.)

• A. Enable port monitor: disable
• B. Peer IP address: 172.16.32.57
• C. Heartbeat status: Primary
• D. Virtual IP address: 172.16.32.55/24
• E. Virtual IP action: Use

Answer: CDE

NEW QUESTION 8




Which of the following statements are true regarding the transparent mode FortiMail’s email routing for the example.com domain? (Choose two.)

• A. FML-1 will use the built-in MTA for outgoing sessions
• B. FML-1 will use the transparent proxy for incoming sessions
• C. If incoming email are undeliverable, FML-1 can queue them to retry again later
• D. If outgoing email messages are undeliverable, FML-1 can queue them to retry later

Answer: BC

NEW QUESTION 9

Examine the FortiMail IBE service configuration shown in the exhibit; then answer the question below.

Which of the following statements describes the User inactivity expiry time of 90 days?

• A. First time IBE users must register to access their email within 90 days of receiving the notification email message
• B. After initial registration, IBE users can access the secure portal without authenticating again for 90 days
• C. Registered IBE users have 90 days from the time they receive a notification email message to access their IBE email
• D. IBE user accounts will expire after 90 days of inactivity, and must register again to access new IBE email message

Answer: D

NEW QUESTION 10

Examine the FortMail mail server settings shown in the exhibit; then answer the question below.

Which of the following statements are true? (Choose two.)

• A. mx.example.com will enforce SMTPS on all outbound sessions
• B. mx.example.com will display STARTTLS as one of the supported commands in SMTP sessions
• C. mx.example.com will accept SMTPS connections
• D. mx.example.com will drop any inbound plaintext SMTP connection

Answer: BC

NEW QUESTION 11

Which two CLI commands, if executed, will erase all data on the log disk partition? (Choose two.)

• A. execute formatmaildisk
• B. execute formatmaildisk_backup
• C. execute formatlogdisk
• D. execute partitionlogdisk 40

Answer: CD

Explanation:
Reference: https://docs.fortinet.com/document/fortimail/6.2.0/cli-reference/588825/formatlogdisk

NEW QUESTION 12

Which three statements about SMTPS and SMTP over TLS are true? (Choose three.)

• A. SMTP over TLS connections are entirely encrypted and initiated on port 465
• B. SMTPS encrypts the identities of both the sender and receiver
• C. The STARTTLS command is used to initiate SMTP over TLS
• D. SMTPS encrypts only the body of the email message
• E. SMTPS connections are initiated on port 465

Answer: BCE

Explanation:
Reference:
https://docs.fortinet.com/document/fortimail/6.2.0/administration-guide/807960/fortimail-support-of- tls-ssl

NEW QUESTION 13

Examine the FortiMail archiving policies shown in the exhibit; then answer the question below.


Which of the following statements is true regarding this configuration? (Choose two.)

• A. Spam email will be exempt from archiving
• B. Email sent from marketing@example.com will be archived
• C. Archived email will be saved in the journal account
• D. Only the marketing@example.com account will be able to access the archived email

Answer: AB

NEW QUESTION 14


What IP address should the DNS MX record for this deployment resolve to?

• A. 172.16.32.1
• B. 172.16.32.57
• C. 172.16.32.55
• D. 172.16.32.56

Answer: C

NEW QUESTION 15

Which firmware upgrade method for an active-passive HA cluster ensures service outage is minimal, and there are no unnecessary failovers?

• A. Break the cluster, upgrade the units independently, and then form the cluster
• B. Upgrade both units at the same time
• C. Upgrade the standby unit, and then upgrade the active unit
• D. Upgrade the active unit, which will upgrade the standby unit automatically

Answer: B

Explanation:
Reference:
https://docs.fortinet.com/document/fortimail/6.2.0/administration-guide/725928/upgrading-firmware- on-ha-units

NEW QUESTION 16
......