Exit demo NSE6_FML-6.2 Fortinet NSE 6 - FortiMail 6.2 PDF format · free preview

Fortinet NSE6_FML-6.2 - Questions & Answers

Free preview · every answer includes a full explanation

Product page: https://prepkeys.com/nse6-fml-62.html

Question 1
Single choice

Refer to the exhibit.

Which configuration change must you make to block an offending IP address temporarily?

A.

Add the offending IP address to the system block list

B.

Add the offending IP address to the user block list

C.

Add the offending IP address to the domain block list

D.

Change the authentication reputation setting status to Enable

Question 2
Single choice

Refer to the exhibit.

Which statement describes the pre-registered status of the IBE user [email protected]?

A.

The user has received an IBE notification email, but has not accessed the HTTPS URL or attachment yet.

B.

The user account has been de-activated, and the user must register again the next time they receive an IBE email.

C.

The user was registered by an administrator in anticipation of IBE participation.

D.

The user has completed the IBE registration process, but has not yet accessed their IBE email.

Question 3
Multiple choice

Refer to the exhibit.

MTA-1 is delivering an email intended for User 1 to MTA-2.

Which two statements about protocol usage between the devices are true? (Choose two.)

A.

User 1 will use IMAP to download the email message from MTA-2

B.

MTA-2 will use IMAP to receive the email message from MTA-1

C.

MTA-1 will use POP3 to deliver the email message to User 1 directly

D.

MTA-1 will use SMTP to deliver the email message to MTA-2

Question 4
Multiple choice

An administrator sees that an excessive amount of storage space on a FortiMail device is being used up by quarantine accounts for invalid users. The FortiMail is operating in transparent mode.

Which two FortiMail features can the administrator configure to tackle this issue? (Choose two.)

A.

Automatic removal of quarantine accounts

B.

Recipient address verification

C.

Bounce address tag verification

D.

Sender address rate control

Question 5
Multiple choice

FortiMail is configured with the protected domain example.com.

Which two envelope addresses will require an access receive rule, to relay for unauthenticated senders? (Choose two.)

A.
B.
C.
D.
Question 6
Multiple choice

Which two antispam techniques query FortiGuard for rating information? (Choose two.)

A.

DNSBL

B.

SURBL

C.

IP reputation

D.

URI filter

Question 7
Multiple choice

What three configuration steps are required to enable DKIM signing for outbound messages on FortiMail? (Choose three.)

A.

Generate a public/private key pair in the protected domain configuration

B.

Enable DKIM check in a matching session profile

C.

Enable DKIM check in a matching antispam profile

D.

Publish the public key as a TXT record in a public DNS server

E.

Enable DKIM signing for outgoing messages in a matching session profile

Question 8
Multiple choice

Which three statements about SMTPS and SMTP over TLS are true? (Choose three.)

A.

SMTP over TLS connections are entirely encrypted and initiated on port 465

B.

SMTPS encrypts the identities of both the sender and receiver

C.

The STARTTLS command is used to initiate SMTP over TLS

D.

SMTPS encrypts only the body of the email message

E.

SMTPS connections are initiated on port 465

Question 9
Multiple choice

Refer to the exhibit.

Which two statements about the MTAs of the domain example.com are true? (Choose two.)

A.

The external MTAs will send email to mx.example.com only if mx.hosted.com is unreachable

B.

The PriNS server should receive all email for the example.com domain

C.

The primary MTA for the example.com domain is mx.hosted.com

D.

The higher preference value is used to load balance more email to the mx.example.com MTA

Question 10
Multiple choice

Refer to the exhibit.

Which two statements about the access receive rule are true? (Choose two.)

A.

Email matching this rule will be relayed

B.

Email must originate from an example.com email address to match this rule

C.

Senders must be authenticated to match this rule

D.

Email from any host in the 10.0.1.0/24 subnet can match this rule

Showing 10 of 30 questions · Unlock the full set