Pass Your NSE 6 Network Security Specialist NSE6_FML-6.2 Exam Easily with Accurate PDF Questions [Nov 25, 2021]
NSE6_FML-6.2 Certification Exam Dumps Questions in here
NEW QUESTION 24
Examine the FortiMail topology and access receive rule shown in the exhibit; then answer the question below.
An administrator must enforce authentication on FML-1 for all outbound email from the example.com domain. Which of the following settings should be used to configure the access receive rule? (Choose two.)
- A. The Recipient pattern should be set o *@example.com
- B. The Sender IP/netmask should be set to 10.29.1.0/24
- C. The Authentication status should be set to Authenticated
- D. The Action should be set to Reject
Answer: B,C
NEW QUESTION 25
Refer to the exhibit.
Which message size limit will FortiMail apply to the outbound email?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A
Explanation:
Explanation
NEW QUESTION 26
Refer to the exhibit.
Which configuration change must you make to block an offending IP address temporarily?
- A. Add the offending IP address to the system block list
- B. Add the offending IP address to the domain block list
- C. Change the authentication reputation setting status to Enable
- D. Add the offending IP address to the user block list
Answer: C
Explanation:
Reference: https://help.fortinet.com/fweb/550/Content/FortiWeb/fortiweb-admin/blacklisting.htm
NEW QUESTION 27
Refer to the exhibit.
The exhibit shows a FortiMail active-passive setup.
Which three actions are recommended when configuring the primary FortiMail HA interface? (Choose three.)
- A. In the Peer IP address field, type 172.16.32.57
- B. Disable Enable port monitor
- C. In the Heartbeat status drop-down list, select Primary
- D. In the Virtual IP address field, type 172.16.32.55/24
- E. In the Virtual IP action drop-down list, select Use
Answer: B,C,E
NEW QUESTION 28
Refer to the exhibit.
An administrator has enabled the sender reputation feature in the Example_Session profile on FML-1. After a few hours, the deferred queue on the mail server starts filling up with undeliverable email. What two changes must the administrator make to fix this issue? (Choose two.)
- A. Disable the exclusive flag in IP policy ID 1
- B. Apply a session profile with sender reputation disabled on a separate IP policy for outbound sessions
- C. Clear the sender reputation database using the CLI
- D. Create an outbound recipient policy to bypass outbound email from session profile inspections
Answer: A,B
NEW QUESTION 29
Which two antispam techniques query FortiGuard for rating information? (Choose two.)
- A. IP reputation
- B. SURBL
- C. DNSBL
- D. URI filter
Answer: B,C
Explanation:
Explanation/Reference: https://docs.fortinet.com/document/fortimail/6.4.0/administration-guide/352990/configuring- antispam-profiles-and-antispam-action-profiles
NEW QUESTION 30
Examine the message column of a log cross search result of an inbound email shown in the exhibit; then answer the question below
Based on logs, which of the following statements are true? (Choose two.)
- A. The logs were generated by a gateway or transparent mode FortiMail
- B. The FortiMail is experiencing issues delivering the email to the back-end mail server
- C. Thelogs were generatedby a server mode FortiMail
- D. The FortiMail is experiencing issues accepting the connection from the remote sender
Answer: C,D
NEW QUESTION 31
Which two CLI commands, if executed, will erase all data on the log disk partition? (Choose two.)
- A. execute formatmaildisk_backup
- B. execute formatmaildisk
- C. execute partitionlogdisk 40
- D. execute formatlogdisk
Answer: C,D
Explanation:
Reference: https://docs.fortinet.com/document/fortimail/6.2.0/cli-reference/588825/formatlogdisk
NEW QUESTION 32
Refer to the exhibit.
An administrator must enforce authentication on FML-1 for all outbound email from the example.com domain. Which two settings should be used to configure the access receive rule? (Choose two.)
- A. The Recipient pattern should be set to *@example.com
- B. The Sender IP/netmask should be set to 10.29.1.0/24
- C. The Authentication status should be set to Authenticated
- D. The Action should be set to Reject
Answer: B,C
NEW QUESTION 33
Refer to the exhibit.
Which two message types will trigger this DLP scan rule? (Choose two.)
- A. An email message with a subject that contains the term "credit card" will trigger this scan rule
- B. An email sent from [email protected] will trigger this scan rule, even without matching any conditions
- C. An email message that contains credit card numbers in the body will trigger this scan rule
- D. An email that contains credit card numbers in the body, attachment, and subject will trigger this scan rule
Answer: C,D
NEW QUESTION 34
Examine the FortiMail recipient-based policy shown in the exhibit; then answer the question below.
After creating the policy, an administrator discovered that clients are able to send unauthenticated email using SMTP. What must be done to ensure clients cannot send unauthenticated email?
- A. Configure a matching IP policy with SMTP authentication and exclusive flag enabled
- B. Configure an access receive rule to verify authentication status
- C. Move the recipient policy to the top of the list
- D. Configure an access delivery rule to enforce authentication
Answer: A
NEW QUESTION 35
Refer to the exhibit.
What two archiving actions will FortiMail take when email messages match these archive policies? (Choose two.)
- A. FortiMail will allow only the [email protected] account to access the archived email
- B. FortiMail will archive email sent from [email protected]
- C. FortiMail will exempt spam email from archiving
- D. FortiMail will save archived email in the journal account
Answer: A,D
NEW QUESTION 36
Examine the nslookup output shown in the exhibit; then answer the question below.
Identify which of the following statements is true regarding the example.com domain's MTAs. (Choose two.)
- A. External MTAs will send email to mx.example.com only if mx.hosted.com is unreachable
- B. The higher preference value is used to load balance more email to the mx.example.com MTA
- C. The PriNS server should receive all email for the example.com domain
- D. The primary MTA for the example.com domain is mx.hosted.com
Answer: A,D
NEW QUESTION 37
Examine the FortiMail active-passive cluster shown in the exhibit; then answer the question below.
Which of the following parameters are recommended for the Primary FortiMail's HA interface configuration?
(Choose three.)
- A. Virtual IP action: Use
- B. Heartbeat status: Primary
- C. Virtual IP address: 172.16.32.55/24
- D. Enable port monitor: disable
- E. Peer IP address: 172.16.32.57
Answer: A,B,C
NEW QUESTION 38
Examine the FortMail mail server settings shown in the exhibit; then answer the question below.
Which of the following statements are true? (Choose two.)
- A. mx.example.com will accept SMTPS connections
- B. mx.example.com will display STARTTLS as one of the supported commands in SMTP sessions
- C. mx.example.com will drop any inbound plaintext SMTP connection
- D. mx.example.com will enforce SMTPS on all outbound sessions
Answer: A,B
NEW QUESTION 39
Examine the FortiMail archiving policies shown in the exhibit; then answer the question below.
Which of the following statements is true regarding this configuration? (Choose two.)
- A. Only the [email protected] account will be able to access the archived email
- B. Spam email will be exempt from archiving
- C. Email sent from [email protected] will be archived
- D. Archived email will be saved in the journal account
Answer: B,C
NEW QUESTION 40
Refer to the exhibit.
Which two statements about the access receive rule are true? (Choose two.)
- A. Email from any host in the 10.0.1.0/24subnet can match this rule
- B. Senders must be authenticated to match this rule
- C. Email matching this rule will be relayed
- D. Email must originate from an example.comemail address to match this rule
Answer: C,D
NEW QUESTION 41
......
Updated NSE6_FML-6.2 Exam Practice Test Questions: https://www.exam4tests.com/NSE6_FML-6.2-valid-braindumps.html