Fortinet Fortinet Certifications NSE6_FML-6.2 Questions & Answers

• Question 11:

  A FortiMail administrator is investigating a sudden increase in DSNs being delivered to the protected domain for undeliverable email messages. After searching the logs, the administrator identifies that the DSNs were not generated as a result of any outbound email sent from the protected domain.

  Which FortiMail antispam technique can the administrator use to prevent this scenario?

  A. Spam outbreak protection

  B. Bounce address tag validation

  C. Spoofed header detection

  D. FortiGuard IP Reputation

  Correct Answer: A

  Reference: https://docs.fortinet.com/document/fortimail/6.2.0/administration-guide/769204/managing-themail-queue

• Question 12:

  Refer to the exhibit.

  

  What two archiving actions will FortiMail take when email messages match these archive policies? (Choose two.)

  A. FortiMail will save archived email in the journal account

  B. FortiMail will allow only the [email protected] account to access the archived email

  C. FortiMail will exempt spam email from archiving

  D. FortiMail will archive email sent from [email protected]

  Correct Answer: AB

• Question 13:

  Refer to the exhibit.

  

  Which message size limit will FortiMail apply to the outbound email?

  A. 204800

  B. 1024

  C. 51200

  D. 10240

  Correct Answer: A

• Question 14:

  Refer to the exhibit.

  

  Which two statements about the mail server settings are true? (Choose two.)

  A. FortiMail will support the STARTTLS extension

  B. FortiMail will accept SMTPS connections

  C. FortiMail will drop any inbound plaintext SMTP connection

  D. FortiMail will enforce SMTPS on all outbound sessions

  Correct Answer: BC

• Question 15:

  Refer to the exhibit.

  

  It is recommended that you configure which three access receive settings to allow outbound email from the example.com domain on FML-1? (Choose three.)

  A. The Sender pattern should be set to *@example.com

  B. The Action should be set to Relay

  C. The Recipient pattern should be set to 10.29.1.45/24

  D. The Enable check box should be cleared

  E. The Sender IP/netmask should be set to 10.29.1.45/32

  Correct Answer: BDE

• Question 16:

  Refer to the exhibit.

  

  Which statement describes the impact of setting the User inactivity expiry time option to 90 days?

  A. IBE user accounts will expire after 90 days of inactivity, and must register again to access new IBE email message

  B. Registered IBE users have 90 days from the time they receive a notification email message to access their IBE email

  C. After initial registration, IBE users can access the secure portal without authenticating again for 90 days

  D. First time IBE users must register to access their email within 90 days of receiving the notification email message

  Correct Answer: A

  Reference: https://docs.fortinet.com/document/fortimail/6.4.0/cli-reference/813529/system-encryptionibe#config_3733402351_2450215

• Question 17:

  Refer to the exhibit.

  

  Which two statements about how the transparent mode FortiMail device routes email for the example.com domain are true? (Choose two.)

  A. If incoming email messages are undeliverable, FML-1 can queue them to retry later

  B. If outgoing email messages are undeliverable, FM-1 can queue them to retry later

  C. FML-1 will use the built-in MTA for outgoing sessions

  D. FML-1 will use the transparent proxy for incoming sessions

  Correct Answer: BD

• Question 18:

  A FortiMail is configured with the protected domain example.com.

  On this FortiMail, which two envelope addresses are considered incoming? (Choose two.)

  A. MAIL FROM: [email protected] RCPT TO: [email protected]

  B. MAIL FROM: [email protected] RCPT TO: [email protected]

  C. MAIL FROM: [email protected] RCPT TO: [email protected]

  D. MAIL FROM: [email protected] RCPT TO: [email protected]

  Correct Answer: CD

  Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/9aa62d26-858d11ea-9384-00505692583a/FortiMail-6.4.0-Administration_Guide.pdf (30)

• Question 19:

  If you are using the built-in MTA to process email in transparent mode, which two statements about FortiMail behavior are true? (Choose two.)

  A. MUAs need to be configured to connect to the built-in MTA to send email

  B. If you disable the built-in MTA, FortiMail will use its transparent proxies to deliver email

  C. FortiMail can queue undeliverable messages and generate DSNs

  D. FortiMail ignores the destination set by the sender, and uses its own MX record lookup to deliver email

  Correct Answer: CD

• Question 20:

  Which firmware upgrade method for an active-passive HA cluster ensures service outage is minimal, and there are no unnecessary failovers?

  A. Break the cluster, upgrade the units independently, and then form the cluster

  B. Upgrade both units at the same time

  C. Upgrade the standby unit, and then upgrade the active unit

  D. Upgrade the active unit, which will upgrade the standby unit automatically

  Correct Answer: B

  Reference: https://docs.fortinet.com/document/fortimail/6.2.0/administration-guide/725928/upgradingfirmware-on-ha-units