File Info
| Exam | Fortinet NSE 6 - FortiMail 6-2 |
| Number | NSE6_FML-6.2 |
| File Name | Fortinet.NSE6_FML-6.2.VCEplus.2021-03-01.30q.vcex |
| Size | 2 MB |
| Posted | Mar 01, 2021 |
| Download | Fortinet.NSE6_FML-6.2.VCEplus.2021-03-01.30q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Which configuration change must you make to block an offending IP address temporarily?
- Add the offending IP address to the system block list
- Add the offending IP address to the user block list
- Add the offending IP address to the domain block list
- Change the authentication reputation setting status to Enable
Correct answer: D
Explanation:
Reference: https://help.fortinet.com/fweb/550/Content/FortiWeb/fortiweb-admin/blacklisting.htm Reference: https://help.fortinet.com/fweb/550/Content/FortiWeb/fortiweb-admin/blacklisting.htm
Question 2
- The user has received an IBE notification email, but has not accessed the HTTPS URL or attachment yet.
- The user account has been de-activated, and the user must register again the next time they receive an IBE email.
- The user was registered by an administrator in anticipation of IBE participation.
- The user has completed the IBE registration process, but has not yet accessed their IBE email.
Correct answer: D
Explanation:
Reference: https://docs.fortinet.com/document/fortimail/6.4.2/administration-guide/470401/configuring-ibe-users Reference: https://docs.fortinet.com/document/fortimail/6.4.2/administration-guide/470401/configuring-ibe-users
Question 3
MTA-1 is delivering an email intended for User 1 to MTA-2.
Which two statements about protocol usage between the devices are true? (Choose two.)
- User 1 will use IMAP to download the email message from MTA-2
- MTA-2 will use IMAP to receive the email message from MTA-1
- MTA-1 will use POP3 to deliver the email message to User 1 directly
- MTA-1 will use SMTP to deliver the email message to MTA-2
Correct answer: AD
Question 4
An administrator sees that an excessive amount of storage space on a FortiMail device is being used up by quarantine accounts for invalid users. The FortiMail is operating in transparent mode.
Which two FortiMail features can the administrator configure to tackle this issue? (Choose two.)
- Automatic removal of quarantine accounts
- Recipient address verification
- Bounce address tag verification
- Sender address rate control
Correct answer: AD
Explanation:
Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/9aa62d26-858d-11ea-9384-00505692583a/FortiMail-6.4.0-Administration_Guide.pdf (322, 323) Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/9aa62d26-858d-11ea-9384-00505692583a/FortiMail-6.4.0-Administration_Guide.pdf (322, 323)
Question 5
FortiMail is configured with the protected domain example.com. Which two envelope addresses will require an access receive rule, to relay for unauthenticated senders? (Choose two.)
- MAIL FROM: [email protected] RCPT TO: [email protected]
- MAIL FROM: [email protected] RCPT TO: [email protected]
- MAIL FROM: [email protected] RCPT TO: [email protected]
- MAIL FROM: [email protected] RCPT TO: [email protected]
Correct answer: BD
Explanation:
Question 6
Which two antispam techniques query FortiGuard for rating information? (Choose two.)
- DNSBL
- SURBL
- IP reputation
- URI filter
Correct answer: AB
Explanation:
Reference: https://docs.fortinet.com/document/fortimail/6.4.0/administration-guide/352990/configuring-antispam-profiles-and-antispam-action-profiles Reference: https://docs.fortinet.com/document/fortimail/6.4.0/administration-guide/352990/configuring-antispam-profiles-and-antispam-action-profiles
Question 7
What three configuration steps are required to enable DKIM signing for outbound messages on FortiMail? (Choose three.)
- Generate a public/private key pair in the protected domain configuration
- Enable DKIM check in a matching session profile
- Enable DKIM check in a matching antispam profile
- Publish the public key as a TXT record in a public DNS server
- Enable DKIM signing for outgoing messages in a matching session profile
Correct answer: ABD
Question 8
Which three statements about SMTPS and SMTP over TLS are true? (Choose three.)
- SMTP over TLS connections are entirely encrypted and initiated on port 465
- SMTPS encrypts the identities of both the sender and receiver
- The STARTTLS command is used to initiate SMTP over TLS
- SMTPS encrypts only the body of the email message
- SMTPS connections are initiated on port 465
Correct answer: BCE
Explanation:
Reference: https://docs.fortinet.com/document/fortimail/6.2.0/administration-guide/807960/fortimail-support-of-tls-ssl Reference: https://docs.fortinet.com/document/fortimail/6.2.0/administration-guide/807960/fortimail-support-of-tls-ssl
Question 9
Refer to the exhibit.
Which two statements about the MTAs of the domain example.com are true? (Choose two.)
- The external MTAs will send email to mx.example.com only if mx.hosted.com is unreachable
- The PriNS server should receive all email for the example.com domain
- The primary MTA for the example.com domain is mx.hosted.com
- The higher preference value is used to load balance more email to the mx.example.com MTA
Correct answer: AC
Question 10
Refer to the exhibit.
Which two statements about the access receive rule are true? (Choose two.)
- Email matching this rule will be relayed
- Email must originate from an example.com email address to match this rule
- Senders must be authenticated to match this rule
- Email from any host in the 10.0.1.0/24 subnet can match this rule
Correct answer: AB
