The Secret Of Fortinet NSE6_FML-6.2 Training Materials

NEW QUESTION 1

Which firmware upgrade method for an active-passive HA cluster ensures service outage is minimal, and there are no unnecessary failovers?

• A. Break the cluster, upgrade the units independently, and then form the cluster
• B. Upgrade both units at the same time
• C. Upgrade the standby unit, and then upgrade the active unit
• D. Upgrade the active unit, which will upgrade the standby unit automatically

Answer: B

Explanation:
Reference:
https://docs.fortinet.com/document/fortimail/6.2.0/administration-guide/725928/upgrading-firmware- on-ha-units

NEW QUESTION 2

What three configuration steps are required to enable DKIM signing for outbound messages on FortiMail? (Choose three.)

• A. Generate a public/private key pair in the protected domain configuration
• B. Enable DKIM check in a matching session profile
• C. Enable DKIM check in a matching antispam profile
• D. Publish the public key as a TXT record in a public DNS server
• E. Enable DKIM signing for outgoing messages in a matching session profile

Answer: ABD

NEW QUESTION 3

Which three statements about SMTPS and SMTP over TLS are true? (Choose three.)

• A. SMTP over TLS connections are entirely encrypted and initiated on port 465
• B. SMTPS encrypts the identities of both the sender and receiver
• C. The STARTTLS command is used to initiate SMTP over TLS
• D. SMTPS encrypts only the body of the email message
• E. SMTPS connections are initiated on port 465

Answer: BCE

Explanation:
Reference:
https://docs.fortinet.com/document/fortimail/6.2.0/administration-guide/807960/fortimail-support-of- tls-ssl

NEW QUESTION 4

Refer to the exhibit.

Which message size limit will FortiMail apply to the outbound email?

• A. 204800
• B. 1024
• C. 51200
• D. 10240

Answer: A

NEW QUESTION 5

Refer to the exhibit.

Which two statements about the mail server settings are true? (Choose two.)

• A. FortiMail will support the STARTTLS extension
• B. FortiMail will accept SMTPS connections
• C. FortiMail will drop any inbound plaintext SMTP connection
• D. FortiMail will enforce SMTPS on all outbound sessions

Answer: BC

NEW QUESTION 6

Examine the FortiMail topology and IP-based policy shown in the exhibit; then answer the question below.

An administrator has enabled the sender reputation feature in the Example_Session profile on FML-1. After a few hours, the deferred queue on the Mail Server started filing up with undeliverable email. What changes should the administrator make to fix this issue? (Choose two.)

• A. Clear the sender reputation database using the CLI
• B. Create an outbound recipient policy to bypass outbound email from session profile inspections
• C. Disable the exclusive flag in IP policy ID 1
• D. Apply a session profile with sender reputation disabled on a separate IP policy for outbound sessions

Answer: BC

NEW QUESTION 7

Examine the FortiMail recipient-based policy shown in the exhibit; then answer the question below.

After creating the policy, an administrator discovered that clients are able to send unauthenticated email using SMTP. What must be done to ensure clients cannot send unauthenticated email?

• A. Configure a matching IP policy with SMTP authentication and exclusive flag enabled
• B. Move the recipient policy to the top of the list
• C. Configure an access receive rule to verify authentication status
• D. Configure an access delivery rule to enforce authentication

Answer: A

NEW QUESTION 8

Examine the nslookup output shown in the exhibit; then answer the question below.

Identify which of the following statements is true regarding the example.com domain’s MTAs. (Choose two.)

• A. External MTAs will send email to mx.example.com only if mx.hosted.com is unreachable
• B. The primary MTA for the example.com domain is mx.hosted.com
• C. The PriNS server should receive all email for the example.com domain
• D. The higher preference value is used to load balance more email to the mx.example.com MTA

Answer: AB

NEW QUESTION 9

While testing outbound MTA functionality, an administrator discovers that all outbound email is being processed using policy IDs 1:2:0.
Which two reasons explain why the last policy ID value is 0? (Choose two.)

• A. Outbound email is being rejected
• B. IP policy ID 2 has the exclusive flag set
• C. There are no outgoing recipient policies configured
• D. There are no access delivery rules configured for outbound email

Answer: CD

NEW QUESTION 10

Refer to the exhibit.

Which two statements about how the transparent mode FortiMail device routes email for the example.com domain are true? (Choose two.)

• A. If incoming email messages are undeliverable, FML-1 can queue them to retry later
• B. If outgoing email messages are undeliverable, FM-1 can queue them to retry later
• C. FML-1 will use the built-in MTA for outgoing sessions
• D. FML-1 will use the transparent proxy for incoming sessions

Answer: BD

NEW QUESTION 11

Which two antispam techniques query FortiGuard for rating information? (Choose two.)

• A. DNSBL
• B. SURBL
• C. IP reputation
• D. URI filter

Answer: AB

Explanation:
Reference: https://docs.fortinet.com/document/fortimail/6.4.0/administration-guide/352990/configuring- antispam-profiles-and-antispam-action-profiles

NEW QUESTION 12

Refer to the exhibit.

Which two message types will trigger this DLP scan rule? (Choose two.)

• A. An email message with a subject that contains the term “credit card” will trigger this scan rule
• B. An email that contains credit card numbers in the body, attachment, and subject will trigger this scan rule
• C. An email message that contains credit card numbers in the body will trigger this scan rule
• D. An email sent from sales@internal.lab will trigger this scan rule, even without matching any conditions

Answer: BC

NEW QUESTION 13

Refer to the exhibit.

Which two statements about the access receive rule are true? (Choose two.)

• A. Email matching this rule will be relayed
• B. Email must originate from an example.com email address to match this rule
• C. Senders must be authenticated to match this rule
• D. Email from any host in the 10.0.1.0/24 subnet can match this rule

Answer: AB

NEW QUESTION 14

An administrator sees that an excessive amount of storage space on a FortiMail device is being used up by quarantine accounts for invalid users. The FortiMail is operating in transparent mode.
Which two FortiMail features can the administrator configure to tackle this issue? (Choose two.)

• A. Automatic removal of quarantine accounts
• B. Recipient address verification
• C. Bounce address tag verification
• D. Sender address rate control

Answer: AD

Explanation:
Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/9aa62d26-858d-11ea-9384-00505692583a/FortiMail-6.4.0-Administration_Guide.pdf (322, 323)

NEW QUESTION 15

Examine the FortiMail DLP scan rule shown in the exhibit; then answer the question below.

Which of the following statements is true regarding this configuration? (Choose two.)

• A. An email message containing the words “Credit Card” in the subject will trigger this scan rule
• B. If an email is sent from sales@internal.lab the action will be applied without matching any conditions
• C. An email message containing credit card numbers in the body will trigger this scan rule
• D. An email must contain credit card numbers in the body, attachment, and subject to trigger this scan rule

Answer: AC

NEW QUESTION 16
......