Fortinet Fortinet Certifications NSE6_FML-6.2 Questions & Answers

• Question 21:

  Refer to the exhibit.

  

  Which two statements about the MTAs of the domain example.com are true? (Choose two.)

  A. The external MTAs will send email to mx.example.com only if mx.hosted.com is unreachable

  B. The PriNS server should receive all email for the example.com domain

  C. The primary MTA for the example.com domain is mx.hosted.com

  D. The higher preference value is used to load balance more email to the mx.example.com MTA

  Correct Answer: AC

• Question 22:

  Refer to the exhibit.

  

  Which two statements about the access receive rule are true? (Choose two.)

  A. Email matching this rule will be relayed

  B. Email must originate from an example.com email address to match this rule

  C. Senders must be authenticated to match this rule

  D. Email from any host in the 10.0.1.0/24 subnet can match this rule

  Correct Answer: AB

• Question 23:

  Which three statements about SMTPS and SMTP over TLS are true? (Choose three.)

  A. SMTP over TLS connections are entirely encrypted and initiated on port 465

  B. SMTPS encrypts the identities of both the sender and receiver

  C. The STARTTLS command is used to initiate SMTP over TLS

  D. SMTPS encrypts only the body of the email message

  E. SMTPS connections are initiated on port 465

  Correct Answer: BCE

  Reference: https://docs.fortinet.com/document/fortimail/6.2.0/administration-guide/807960/fortimailsupport-of-tls-ssl

• Question 24:

  What three configuration steps are required to enable DKIM signing for outbound messages on FortiMail? (Choose three.)

  A. Generate a public/private key pair in the protected domain configuration

  B. Enable DKIM check in a matching session profile

  C. Enable DKIM check in a matching antispam profile

  D. Publish the public key as a TXT record in a public DNS server

  E. Enable DKIM signing for outgoing messages in a matching session profile

  Correct Answer: ABD

• Question 25:

  Which two antispam techniques query FortiGuard for rating information? (Choose two.)

  A. DNSBL

  B. SURBL

  C. IP reputation

  D. URI filter

  Correct Answer: AB

  Reference: https://docs.fortinet.com/document/fortimail/6.4.0/administration-guide/352990/configuringantispam-profiles-and-antispam-action-profiles

• Question 26:

  FortiMail is configured with the protected domain example.com.

  Which two envelope addresses will require an access receive rule, to relay for unauthenticated senders? (Choose two.)

  A. MAIL FROM: [email protected] RCPT TO: [email protected]

  B. MAIL FROM: [email protected] RCPT TO: [email protected]

  C. MAIL FROM: [email protected] RCPT TO: [email protected]

  D. MAIL FROM: [email protected] RCPT TO: [email protected]

  Correct Answer: BD

• Question 27:

  An administrator sees that an excessive amount of storage space on a FortiMail device is being used up by quarantine accounts for invalid users. The FortiMail is operating in transparent mode.

  Which two FortiMail features can the administrator configure to tackle this issue? (Choose two.)

  A. Automatic removal of quarantine accounts

  B. Recipient address verification

  C. Bounce address tag verification

  D. Sender address rate control

  Correct Answer: AD

  Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/9aa62d26-858d11ea-9384-00505692583a/FortiMail-6.4.0-Administration_Guide.pdf (322, 323)

• Question 28:

  Refer to the exhibit.

  

  MTA-1 is delivering an email intended for User 1 to MTA-2.

  Which two statements about protocol usage between the devices are true? (Choose two.)

  A. User 1 will use IMAP to download the email message from MTA-2

  B. MTA-2 will use IMAP to receive the email message from MTA-1

  C. MTA-1 will use POP3 to deliver the email message to User 1 directly

  D. MTA-1 will use SMTP to deliver the email message to MTA-2

  Correct Answer: AD

• Question 29:

  Refer to the exhibit.

  

  Which statement describes the pre-registered status of the IBE user [email protected]?

  A. The user has received an IBE notification email, but has not accessed the HTTPS URL or attachment yet.

  B. The user account has been de-activated, and the user must register again the next time they receive an IBE email.

  C. The user was registered by an administrator in anticipation of IBE participation.

  D. The user has completed the IBE registration process, but has not yet accessed their IBE email.

  Correct Answer: D

  Reference: https://docs.fortinet.com/document/fortimail/6.4.2/administration-guide/470401/configuring-ibeusers

• Question 30:

  Refer to the exhibit.

  

  Which configuration change must you make to block an offending IP address temporarily?

  A. Add the offending IP address to the system block list

  B. Add the offending IP address to the user block list

  C. Add the offending IP address to the domain block list

  D. Change the authentication reputation setting status to Enable

  Correct Answer: D

  Reference: https://help.fortinet.com/fweb/550/Content/FortiWeb/fortiweb-admin/blacklisting.htm