Fortinet NSE6_FML-6.0 Online Practice Questions and Exam Preparation

Fortinet NSE6_FML-6.0 Online Questions & Answers

• Question 11:

  Examine the FortiMail topology and access receive rule shown in the exhibit; then answer the question below.

  

  An administrator must enforce authentication on FML-1 for all outbound email from the example.com domain. Which of the following settings should be used to configure the access receive rule? (Choose two.)

  A. The Sender IP/netmask should be set to 10.29.1.0/24
  B. The Authentication status should be set to Authenticated
  C. The Recipient pattern should be set o *@example.com
  D. The Action should be set to Reject
  C. The Recipient pattern should be set o *@example.com
  D. The Action should be set to Reject

• Question 12:

  What are the configuration steps to enable DKIM signing for outbound messages on FortiMail? (Choose three.)

  A. Enable DKIM signing for outgoing messages in a matching session profile
  B. Publish the public key as a TXT record in a public DNS server
  C. Enable DKIM check in a matching session profile
  D. Enable DKIM check in a matching antispam profile
  E. Generate a public/private key pair in the protected domain configuration
  A. Enable DKIM signing for outgoing messages in a matching session profile
  C. Enable DKIM check in a matching session profile
  E. Generate a public/private key pair in the protected domain configuration

• Question 13:

  FortiMail is configured with the protected domain "example.com". Identify which of the following envelope addresses will require an access receive rule to relay for unauthenticated senders? (Choose two.)

  A. MAIL FROM: [email protected] RCPT TO: [email protected]
  B. MAIL FROM: [email protected] RCPT TO: [email protected]
  C. MAIL FROM: [email protected] RCPT TO: [email protected]
  D. MAIL FROM: [email protected] RCPT TO: [email protected]
  C. MAIL FROM: [email protected] RCPT TO: [email protected]
  D. MAIL FROM: [email protected] RCPT TO: [email protected]

• Question 14:

  An organization has different groups of users with different needs in email functionality, such as address book access, mobile device access, email retention periods, and disk quotas. Which FortiMail feature specific to server mode can be used to accomplish this?

  A. Resource profiles
  B. Address book management options
  C. Access profiles
  D. Domain-level service settings
  D. Domain-level service settings

• Question 15:

  Examine the FortiMail IBE service configuration shown in the exhibit; then answer the question below.

  

  Which of the following statements describes the User inactivity expiry time of 90 days?

  A. First time IBE users must register to access their email within 90 days of receiving the notification email message
  B. After initial registration, IBE users can access the secure portal without authenticating again for 90 days
  C. Registered IBE users have 90 days from the time they receive a notification email message to access their IBE email
  D. IBE user accounts will expire after 90 days of inactivity, and must register again to access new IBE email message
  D. IBE user accounts will expire after 90 days of inactivity, and must register again to access new IBE email message

• Question 16:

  Examine the configured routes shown in the exhibit; then answer the question below.

  

  Which interface will FortiMail use to forward an email message destined for 10.1.100.252?

  A. port2
  B. port4
  C. port3
  D. port1
  A. port2

• Question 17:

  Which firmware upgrade method for an active-passive HA cluster ensures service outage is minimal and there are no unnecessary failovers?

  A. Upgrade the active unit, which will upgrade the standby unit automatically
  B. Upgrade both units at the same time
  C. Upgrade the standby unit, and then upgrade the active unit
  D. Break the cluster, upgrade the units independently, and then form the cluster again as quickly as possible
  D. Break the cluster, upgrade the units independently, and then form the cluster again as quickly as possible

• Question 18:

  Examine the FortiMail DLP scan rule shown in the exhibit; then answer the question below.

  

  Which of the following statements is true regarding this configuration? (Choose two.)

  A. An email message containing the words "Credit Card" in the subject will trigger this scan rule
  B. If an email is sent from [email protected] the action will be applied without matching any conditions
  C. An email message containing credit card numbers in the body will trigger this scan rule
  D. An email must contain credit card numbers in the body, attachment, and subject to trigger this scan rule
  A. An email message containing the words "Credit Card" in the subject will trigger this scan rule
  C. An email message containing credit card numbers in the body will trigger this scan rule

• Question 19:

  Which of the following CLI commands, if executed, will erase all data on the log disk partition? (Choose two.)

  A. execute formatmaildisk
  B. execute formatmaildisk_backup
  C. execute formatlogdisk
  D. execute partitionlogdisk 40
  C. execute formatlogdisk
  D. execute partitionlogdisk 40

• Question 20:

  Which of the following antispam techniques queries FortiGuard for rating information? (Choose two.)

  A. URI filter
  B. IP reputation
  C. SURBL
  D. DNSBL
  B. IP reputation
  D. DNSBL