[Sep-2022] Dumps Practice Exam Questions Study Guide for the NSE6_FML-6.2 Exam [Q18-Q42]

Share

[Sep-2022] Dumps Practice Exam Questions Study Guide for the NSE6_FML-6.2 Exam

NSE6_FML-6.2 Dumps with Practice Exam Questions Answers

NEW QUESTION 18
Examine the FortiMail active-passive cluster shown in the exhibit; then answer the question below.


Which of the following parameters are recommended for the Primary FortiMail's HA interface configuration? (Choose three.)

  • A. Virtual IP address: 172.16.32.55/24
  • B. Virtual IP action: Use
  • C. Heartbeat status: Primary
  • D. Enable port monitor: disable
  • E. Peer IP address: 172.16.32.57

Answer: A,B,C

 

NEW QUESTION 19
What are the configuration steps to enable DKIM signing for outbound messages on FortiMail? (Choose three.)

  • A. Generate a public/private key pair in the protected domain configuration
  • B. Enable DKIM check in a matching antispam profile
  • C. Enable DKIM check in a matching session profile
  • D. Publish the public key as a TXT record in a public DNS server
  • E. Enable DKIM signing for outgoing messages in a matching session profile

Answer: A,D,E

 

NEW QUESTION 20
Examine the FortiMail session profile and protected domain configuration shown in the exhibit; then answer the question below.


Which size limit will FortiMail apply to outbound email?

  • A. 0
  • B. 1
  • C. 2
  • D. 3

Answer: B

 

NEW QUESTION 21
Refer to the exhibit.

Which two message types will trigger this DLP scan rule? (Choose two.)

  • A. An email message that contains credit card numbers in the body will trigger this scan rule
  • B. An email that contains credit card numbers in the body, attachment, and subject will trigger this scan rule
  • C. An email sent from [email protected] will trigger this scan rule, even without matching any conditions
  • D. An email message with a subject that contains the term "credit card" will trigger this scan rule

Answer: A,B

 

NEW QUESTION 22
Refer to the exhibit.

Which two message types will trigger this DLP scan rule? (Choose two.)

  • A. An email message that contains credit card numbers in the body will trigger this scan rule
  • B. An email that contains credit card numbers in the body, attachment, and subject will trigger this scan rule
  • C. An email sent from [email protected] will trigger this scan rule, even without matching any conditions
  • D. An email message with a subject that contains the term "credit card" will trigger this scan rule

Answer: A,B

 

NEW QUESTION 23
Refer to the exhibit.

Which statement describes the impact of setting the User inactivity expiry time option to 90 days?

  • A. After initial registration, IBE users can access the secure portal without authenticating again for 90 days
  • B. IBE user accounts will expire after 90 days of inactivity, and must register again to access new IBE email message
  • C. Registered IBE users have 90 days from the time they receive a notification email message to access their IBE email
  • D. First time IBE users must register to access their email within 90 days of receiving the notification email message

Answer: B

Explanation:
Reference: https://docs.fortinet.com/document/fortimail/6.4.0/cli-reference/813529/system-encryption- ibe#config_3733402351_2450215

 

NEW QUESTION 24
Refer to the exhibit.

Which two statements about the mail server settings are true? (Choose two.)

  • A. FortiMail will accept SMTPS connections
  • B. FortiMail will drop any inbound plaintext SMTP connection
  • C. FortiMail will enforce SMTPS on all outbound sessions
  • D. FortiMail will support the STARTTLS extension

Answer: A,B

 

NEW QUESTION 25
Refer to the exhibit.

What are two expected outcomes if FortiMail applies this antivirus action profile to an email? (Choose two.)

  • A. The administrator will be notified of the virus detection
  • B. A replacement message will be added to the email
  • C. The sanitized email will be sent to the recipient's personal quarantine
  • D. Virus content will be removed from the email

Answer: B,C

 

NEW QUESTION 26
Refer to the exhibit.

Which two statements about the access receive rule are true? (Choose two.)

  • A. Email must originate from an example.comemail address to match this rule
  • B. Senders must be authenticated to match this rule
  • C. Email from any host in the 10.0.1.0/24subnet can match this rule
  • D. Email matching this rule will be relayed

Answer: A,D

 

NEW QUESTION 27
FortiMail is configured with the protected domain example.com.
Which two envelope addresses will require an access receive rule, to relay for unauthenticated senders?
(Choose two.)

Answer: A,D

 

NEW QUESTION 28
An organization has different groups of users with different needs in email functionality, such as address book access, mobile device access, email retention periods, and disk quotas.
Which FortiMail feature specific to server mode can be used to accomplish this?

  • A. Resource profiles
  • B. Address book management options
  • C. Access profiles
  • D. Domain-level service settings

Answer: A

 

NEW QUESTION 29
Which FortiMail option removes embedded code components in Microsoft Word, while maintaining the original file format?

  • A. Behavior analysis
  • B. Header analysis
  • C. Content disarm and reconstruction
  • D. Impersonation analysis

Answer: C

 

NEW QUESTION 30
An administrator sees that an excessive amount of storage space on a FortiMail device is being used up by quarantine accounts for invalid users. The FortiMail is operating in transparent mode.
Which two FortiMail features can the administrator configure to tackle this issue? (Choose two.)

  • A. Bounce address tag verification
  • B. Recipient address verification
  • C. Automatic removal of quarantine accounts
  • D. Sender address rate control

Answer: C,D

Explanation:
Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/9aa62d26-858d-11ea-
9384-00505692583a/FortiMail-6.4.0-Administration_Guide.pdf (322, 323)

 

NEW QUESTION 31
Which two CLI commands, if executed, will erase all data on the log disk partition? (Choose two.)

  • A. execute formatlogdisk
  • B. execute formatmaildisk_backup
  • C. execute partitionlogdisk 40
  • D. execute formatmaildisk

Answer: A,C

 

NEW QUESTION 32
Examine the FortiMail user webmail interface shown in the exhibit; then answer the question below.

Which one of the following statements is true regarding this server mode FortiMail's configuration?

  • A. The protected domain-level service settings have been modified to allow access to the domain address book
  • B. The administrator has not made any changes to the default address book access privileges
  • C. The administrator has configured an inbound recipient policy with a customized resource profile
  • D. This user's account has a customized access profile applied that allows access to the personal address book

Answer: A

 

NEW QUESTION 33
An administrator sees that an excessive amount of storage space on a FortiMail device is being used up by quarantine accounts for invalid users. The FortiMail is operating in transparent mode.
Which two FortiMail features can the administrator configure to tackle this issue? (Choose two.)

  • A. Bounce address tag verification
  • B. Recipient address verification
  • C. Automatic removal of quarantine accounts
  • D. Sender address rate control

Answer: C,D

Explanation:
Explanation/Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/9aa62d26-858d-11ea-
9384-00505692583a/FortiMail-6.4.0-Administration_Guide.pdf (322, 323)

 

NEW QUESTION 34
Examine the FortiMail IBE users shown in the exhibit; then answer the question below

Which one of the following statements describes the Pre-registered status of the IBE user [email protected]?

  • A. The user has received an IBE notification email, but has not accessed the HTTPS URL or attachment yet
  • B. The user account has been de-activated, and the user must register again the next time they receive an IBE email
  • C. The user has completed the IBE registration process but has not yet accessed their IBE email
  • D. The user was registered by an administrator in anticipation of IBE participation

Answer: A

 

NEW QUESTION 35
Refer to the exhibit.

An administrator has enabled the sender reputation feature in the Example_Session profile on FML-1. After a few hours, the deferred queue on the mail server starts filling up with undeliverable email. What two changes must the administrator make to fix this issue? (Choose two.)

  • A. Clear the sender reputation database using the CLI
  • B. Disable the exclusive flag in IP policy ID 1
  • C. Create an outbound recipient policy to bypass outbound email from session profile inspections
  • D. Apply a session profile with sender reputation disabled on a separate IP policy for outbound sessions

Answer: B,D

 

NEW QUESTION 36
Which FortiMail option removes embedded code components in Microsoft Word, while maintaining the original file format?

  • A. Behavior analysis
  • B. Header analysis
  • C. Content disarm and reconstruction
  • D. Impersonation analysis

Answer: C

Explanation:
Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/8c063dd3-bafe-11e9- a989-00505692583a/fortimail-admin-620.pdf (435)

 

NEW QUESTION 37
A FortiMail is configured with the protected domain example.com.
On this FortiMail, which two envelope addresses are considered incoming? (Choose two.)

Answer: C,D

Explanation:
Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/9aa62d26-858d-11ea-9384-00505692583a/FortiMail-6.4.0-Administration_Guide.pdf (30)

 

NEW QUESTION 38
Examine the configured routes shown in the exhibit; then answer the question below.

Which interface will FortiMail use to forward an email message destined for 10.1.100.252?

  • A. port4
  • B. port3
  • C. port1
  • D. port2

Answer: D

 

NEW QUESTION 39
Refer to the exhibit.

Which message size limit will FortiMail apply to the outbound email?

  • A. 0
  • B. 1
  • C. 2
  • D. 3

Answer: B

 

NEW QUESTION 40
Which of the following antispam techniques queries FortiGuard for rating information? (Choose two.)

  • A. SURBL
  • B. URI filter
  • C. DNSBL
  • D. IP reputation

Answer: B,D

 

NEW QUESTION 41
Which firmware upgrade method for an active-passive HA cluster ensures service outage is minimal, and there are no unnecessary failovers?

  • A. Upgrade the standby unit, and then upgrade the active unit
  • B. Upgrade the active unit, which will upgrade the standby unit automatically
  • C. Upgrade both units at the same time
  • D. Break the cluster, upgrade the units independently, and then form the cluster

Answer: C

 

NEW QUESTION 42
......

Free NSE 6 Network Security Specialist NSE6_FML-6.2 Exam Question: https://www.actual4exams.com/NSE6_FML-6.2-valid-dump.html