[Nov-2021] Fortinet NSE6_FML-6.2 Test Engine PDF - All Free Dumps from PassSureExam
Get New NSE6_FML-6.2 Certification – Valid Exam Dumps Questions
NEW QUESTION 10
Refer to the exhibit.
What two archiving actions will FortiMail take when email messages match these archive policies? (Choose two.)
- A. FortiMail will exempt spam email from archiving
- B. FortiMail will archive email sent from [email protected]
- C. FortiMail will save archived email in the journal account
- D. FortiMail will allow only the [email protected] account to access the archived email
Answer: C,D
NEW QUESTION 11
Refer to the exhibit.
Which configuration change must you make to block an offending IP address temporarily?
- A. Add the offending IP address to the system block list
- B. Change the authentication reputation setting status to Enable
- C. Add the offending IP address to the domain block list
- D. Add the offending IP address to the user block list
Answer: B
Explanation:
Reference: https://help.fortinet.com/fweb/550/Content/FortiWeb/fortiweb-admin/blacklisting.htm
NEW QUESTION 12
A FortiMail administrator is investigating a sudden increase in DSNs being delivered to the protected domain for undeliverable email messages. After searching the logs, the administrator identifies that the DSNs were not generated as a result of any outbound email sent from the protected domain.
Which FortiMail antispam technique can the administrator use to prevent this scenario?
- A. Spoofed header detection
- B. FortiGuard IP Reputation
- C. Spam outbreak protection
- D. Bounce address tag validation
Answer: C
Explanation:
Explanation/Reference: https://docs.fortinet.com/document/fortimail/6.2.0/administration-guide/769204/managing-the- mail-queue
NEW QUESTION 13
Which of the following antispam techniques queries FortiGuard for rating information? (Choose two.)
- A. URI filter
- B. SURBL
- C. IP reputation
- D. DNSBL
Answer: A,C
NEW QUESTION 14
A FortiMail is configured with the protected domain example.com.
On this FortiMail, which two envelope addresses are considered incoming? (Choose two.)
- A. MAIL FROM: [email protected] RCPT TO: [email protected]
- B. MAIL FROM: [email protected] RCPT TO: [email protected]
- C. MAIL FROM: [email protected] RCPT TO: [email protected]
- D. MAIL FROM: [email protected] RCPT TO: [email protected]
Answer: A,C
Explanation:
Explanation/Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/9aa62d26-858d-11ea-
9384-00505692583a/FortiMail-6.4.0-Administration_Guide.pdf (30)
NEW QUESTION 15
Which of the following statements are true regarding FortiMail's behavior when using the built-in MTA to process email in transparent mode? (Choose two.)
- A. MUAs need to be configured to connect to the built-in MTA to send email
- B. If you disable the built-in MTA, FortiMail will use its transparent proxies to deliver email
- C. FortiMail can queue undeliverable messages and generate DSNs
- D. FortiMail ignores the destination set by the sender and uses its own MX record lookup to deliver email
Answer: B,D
NEW QUESTION 16
What are the configuration steps to enable DKIM signing for outbound messages on FortiMail? (Choose three.)
- A. Enable DKIM check in a matching session profile
- B. Generate a public/private key pair in the protected domain configuration
- C. Enable DKIM check in a matching antispam profile
- D. Enable DKIM signing for outgoing messages in a matching session profile
- E. Publish the public key as a TXT record in a public DNS server
Answer: B,D,E
NEW QUESTION 17
Examine the access receive rule shown in the exhibit; then answer the question below.
Which of the following statements are true? (Choose two.)
- A. Email must originate from an example.com email address to match this rule
- B. Email matching this rule will be relayed
- C. Email from any host in the 10.0.1.0/24 subnet can match this rule
- D. Senders must be authenticated to match this rule
Answer: A,B
NEW QUESTION 18
A FortiMail administrator is investigating a sudden increase in DSNs being delivered to the protected domain for undeliverable email messages. After searching the logs, the administrator identifies that the DSNs were not generated as a result of any outbound email sent from the protected domain.
Which FortiMail antispam technique can the administrator use to prevent this scenario?
- A. Spoofed header detection
- B. FortiGuard IP Reputation
- C. Spam outbreak protection
- D. Bounce address tag validation
Answer: C
Explanation:
Reference:
https://docs.fortinet.com/document/fortimail/6.2.0/administration-guide/769204/managing-the-mail- queue
NEW QUESTION 19
Refer to the exhibit.
What are two expected outcomes if FortiMail applies this antivirus action profile to an email? (Choose two.)
- A. The sanitized email will be sent to the recipient's personal quarantine
- B. A replacement message will be added to the email
- C. The administrator will be notified of the virus detection
- D. Virus content will be removed from the email
Answer: A,B
NEW QUESTION 20
Which firmware upgrade method for an active-passive HA cluster ensures service outage is minimal, and there are no unnecessary failovers?
- A. Upgrade both units at the same time
- B. Upgrade the standby unit, and then upgrade the active unit
- C. Upgrade the active unit, which will upgrade the standby unit automatically
- D. Break the cluster, upgrade the units independently, and then form the cluster
Answer: A
Explanation:
Reference:
https://docs.fortinet.com/document/fortimail/6.2.0/administration-guide/725928/upgrading-firmware- on-ha-units
NEW QUESTION 21
Refer to the exhibit.
It is recommended that you configure which three access receive settings to allow outbound email from the example.com domain on FML-1? (Choose three.)
- A. The Sender IP/netmask should be set to 10.29.1.45/32
- B. The Sender pattern should be set to *@example.com
- C. The Recipient pattern should be set to 10.29.1.45/24
- D. The Action should be set to Relay
- E. The Enable check box should be cleared
Answer: A,D,E
NEW QUESTION 22
Examine the FortiMail active-passive cluster shown in the exhibit; then answer the question below.
Which of the following parameters are recommended for the Primary FortiMail's HA interface configuration?
(Choose three.)
- A. Enable port monitor: disable
- B. Virtual IP action: Use
- C. Heartbeat status: Primary
- D. Peer IP address: 172.16.32.57
- E. Virtual IP address: 172.16.32.55/24
Answer: B,C,E
NEW QUESTION 23
Refer to the exhibit.
Which configuration change must you make to block an offending IP address temporarily?
- A. Add the offending IP address to the system block list
- B. Change the authentication reputation setting status to Enable
- C. Add the offending IP address to the domain block list
- D. Add the offending IP address to the user block list
Answer: B
Explanation:
Explanation/Reference: https://help.fortinet.com/fweb/550/Content/FortiWeb/fortiweb-admin/blacklisting.htm
NEW QUESTION 24
While testing outbound MTA functionality, an administrator discovers that all outbound email is being processed using policy IDs 1:2:0.
Which two reasons explain why the last policy ID value is 0? (Choose two.)
- A. There are no outgoing recipient policies configured
- B. There are no access delivery rules configured for outbound email
- C. IP policy ID 2 has the exclusive flag set
- D. Outbound email is being rejected
Answer: A,B
NEW QUESTION 25
An administrator sees that an excessive amount of storage space on a FortiMail device is being used up by quarantine accounts for invalid users. The FortiMail is operating in transparent mode.
Which two FortiMail features can the administrator configure to tackle this issue? (Choose two.)
- A. Recipient address verification
- B. Bounce address tag verification
- C. Sender address rate control
- D. Automatic removal of quarantine accounts
Answer: C,D
Explanation:
Explanation/Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/9aa62d26-858d-11ea-
9384-00505692583a/FortiMail-6.4.0-Administration_Guide.pdf (322, 323)
NEW QUESTION 26
Which two CLI commands, if executed, will erase all data on the log disk partition? (Choose two.)
- A. execute formatlogdisk
- B. execute partitionlogdisk 40
- C. execute formatmaildisk
- D. execute formatmaildisk_backup
Answer: A,B
Explanation:
Reference: https://docs.fortinet.com/document/fortimail/6.2.0/cli-reference/588825/formatlogdisk
NEW QUESTION 27
Refer to the exhibit.
Which two statements about the access receive rule are true? (Choose two.)
- A. Email from any host in the 10.0.1.0/24subnet can match this rule
- B. Email matching this rule will be relayed
- C. Email must originate from an example.comemail address to match this rule
- D. Senders must be authenticated to match this rule
Answer: B,C
NEW QUESTION 28
What three configuration steps are required to enable DKIM signing for outbound messages on FortiMail?
(Choose three.)
- A. Generate a public/private key pair in the protected domain configuration
- B. Enable DKIM check in a matching antispam profile
- C. Enable DKIM signing for outgoing messages in a matching session profile
- D. Publish the public key as a TXT record in a public DNS server
- E. Enable DKIM check in a matching session profile
Answer: A,D,E
NEW QUESTION 29
......
100% Passing Guarantee - Brilliant NSE6_FML-6.2 Exam Questions PDF: https://www.passsureexam.com/NSE6_FML-6.2-pass4sure-exam-dumps.html