NSE6_FML-6.0 Online Practice Questions and Answers

Examine the FortiMail session profile and protected domain configuration shown in the exhibit; then answer the question below.

Which size limit will FortiMail apply to outbound email?

A. 204800

B. 51200 C. 1024

D. 10240

Examine the FortiMail antivirus action profile shown in the exhibit; then answer the question below.

What is the expected outcome if FortiMail applies this action profile to an email? (Choose two.)

A. The sanitized email will be sent to the recipient's personal quarantine

B. A replacement message will be added to the email

C. Virus content will be removed from the email

D. The administrator will be notified of the virus detection

Examine the FortiMail recipient-based policy shown in the exhibit; then answer the question below.

After creating the policy, an administrator discovered that clients are able to send unauthenticated email using SMTP. What must be done to ensure clients cannot send unauthenticated email?

A. Configure a matching IP policy with SMTP authentication and exclusive flag enabled

B. Move the recipient policy to the top of the list

C. Configure an access receive rule to verify authentication status

D. Configure an access delivery rule to enforce authentication

Examine the nslookup output shown in the exhibit; then answer the question below.

Identify which of the following statements is true regarding the example.com domain's MTAs. (Choose two.)

A. External MTAs will send email to mx.example.com only if mx.hosted.com is unreachable

B. The primary MTA for the example.com domain is mx.hosted.com

C. The PriNS server should receive all email for the example.com domain

D. The higher preference value is used to load balance more email to the mx.example.com MTA

What are the configuration steps to enable DKIM signing for outbound messages on FortiMail? (Choose three.)

A. Enable DKIM signing for outgoing messages in a matching session profile

B. Publish the public key as a TXT record in a public DNS server

C. Enable DKIM check in a matching session profile

D. Enable DKIM check in a matching antispam profile

E. Generate a public/private key pair in the protected domain configuration

Examine the FortMail mail server settings shown in the exhibit; then answer the question below.

Which of the following statements are true? (Choose two.)

A. mx.example.com will enforce SMTPS on all outbound sessions

B. mx.example.com will display STARTTLS as one of the supported commands in SMTP sessions

C. mx.example.com will accept SMTPS connections

D. mx.example.com will drop any inbound plaintext SMTP connection

Examine the FortiMail active-passive cluster shown in the exhibit; then answer the question below.

Which of the following parameters are recommended for the Primary FortiMail's HA interface configuration? (Choose three.)

A. Enable port monitor: disable

B. Peer IP address: 172.16.32.57

C. Heartbeat status: Primary

D. Virtual IP address: 172.16.32.55/24

E. Virtual IP action: Use

Examine the configured routes shown in the exhibit; then answer the question below.

Which interface will FortiMail use to forward an email message destined for 10.1.100.252?

A. port2

B. port4

C. port3

D. port1

Examine the FortiMail user webmail interface shown in the exhibit; then answer the question below.

Which one of the following statements is true regarding this server mode FortiMail's configuration?

A. The protected domain-level service settings have been modified to allow access to the domain address book

B. This user's account has a customized access profile applied that allows access to the personal address book

C. The administrator has not made any changes to the default address book access privileges

D. The administrator has configured an inbound recipient policy with a customized resource profile

A FortiMail administrator is investigating a sudden increase in DSNs being delivered to the protected domain for undeliverable email messages. After searching the logs, the administrator identifies that the DSNs were not generated as a result of any outbound email sent from the protected domain. Which FortiMail antispam technique can the administrator use to prevent this scenario? (Choose one.)

A. Bounce address tag validation

B. Spam outbreak protection

C. Spoofed header detection

D. FortiGuard IP Reputation

Examine the FortiMail DLP scan rule shown in the exhibit; then answer the question below.

Which of the following statements is true regarding this configuration? (Choose two.)

A. An email message containing the words "Credit Card" in the subject will trigger this scan rule

B. If an email is sent from [email protected] the action will be applied without matching any conditions

C. An email message containing credit card numbers in the body will trigger this scan rule

D. An email must contain credit card numbers in the body, attachment, and subject to trigger this scan rule

Examine the FortiMail archiving policies shown in the exhibit; then answer the question below.

Which of the following statements is true regarding this configuration? (Choose two.)

A. Spam email will be exempt from archiving

B. Email sent from [email protected] will be archived

C. Archived email will be saved in the journal account

D. Only the [email protected] account will be able to access the archived email

Which of the following antispam techniques queries FortiGuard for rating information? (Choose two.)

A. URI filter

B. IP reputation

C. SURBL

D. DNSBL

Which firmware upgrade method for an active-passive HA cluster ensures service outage is minimal and there are no unnecessary failovers?

A. Upgrade the active unit, which will upgrade the standby unit automatically

B. Upgrade both units at the same time

C. Upgrade the standby unit, and then upgrade the active unit

D. Break the cluster, upgrade the units independently, and then form the cluster again as quickly as possible

Examine the FortiMail topology and IP-based policy shown in the exhibit; then answer the question below.

An administrator has enabled the sender reputation feature in the Example_Session profile on FML-1. After a few hours, the deferred queue on the Mail Server started filing up with undeliverable email. What changes should the administrator make to fix this issue? (Choose two.)

A. Clear the sender reputation database using the CLI

B. Create an outbound recipient policy to bypass outbound email from session profile inspections

C. Disable the exclusive flag in IP policy ID 1

D. Apply a session profile with sender reputation disabled on a separate IP policy for outbound sessions