Fortinet NSE6_FML-7.2 Online Practice Questions and Exam Preparation

Fortinet NSE6_FML-7.2 Online Questions & Answers

• Question 1:

  In which FortiMail configuration object can you assign an outbound session profile?

  A. Outbound recipient policy
  B. Inbound recipient policy
  C. IP policy
  D. Access delivery rule
  A. Outbound recipient policy

• Question 2:

  Refer to the exhibits which show a topology diagram (Topology) and a configuration element (Access Control Rule).

  

  

  Which three access control settings are recommended to allow outbound email from the example.com domain on FML-1? (Choose three.)

  A. The Sender IP/netmask should be set to 10.29.1.45/32.
  B. The Recipient pattern should be set to 10.29.1.45/24
  C. The Action should be set to Relay.
  D. The Sender pattern should be set to *@example.com.
  E. The Enable check box should be cleared.
  A. The Sender IP/netmask should be set to 10.29.1.45/32.
  C. The Action should be set to Relay.
  D. The Sender pattern should be set to *@example.com.

• Question 3:

  Refer to the exhibits which show a topology diagram (Topology), and a configuration element (Access Control Rule).

  

  

  An administrator must enforce authentication on FML-1 for all outbound email from the example.com domain. Which two settings should be used to configure the access receive rule? (Choose two.)

  A. The Sender IP/netmask should be set to 10.29.1.0/24.
  B. The Action should be set to Reject
  C. The Recipient pattern should be set to ?@example. com.
  D. The Authentication status should be set to Authenticated
  A. The Sender IP/netmask should be set to 10.29.1.0/24.
  D. The Authentication status should be set to Authenticated

• Question 4:

  In which two places can the maximum email size be overridden on FortiMail? (Choose two.)

  A. IP Policy configuration
  B. Protected Domain configuration
  C. Resource Profile configuration
  D. Session Profile configuration
  B. Protected Domain configuration
  C. Resource Profile configuration

• Question 5:

  A FortiMail administrator is investigating a sudden increase in DSNs being delivered to their protected domain. After searching the logs, the administrator identifies that the DSNs were not generated because of any outbound email sent from their organization. Which FortiMail antispam technique can the administrator use to prevent this scenario?

  A. FortiGuard IP Reputation
  B. Spoofed header detection
  C. Spam outbreak protection
  D. Bounce address tag validation
  D. Bounce address tag validation

• Question 6:

  Refer to the exhibit which displays a list of IBE users on a FortiMail device.

  

  Which statement describes the pre-registered status of the IBE user extuser2@external.lab?

  A. The user has received an IBE notification email, but has not accessed the HTTPS URL or attachment yet.
  B. The user was registered by an administrator in anticipation of IBE participation.
  C. The user account has been de-activated, and the user must register again the next time they receive an IBE email.
  D. The user has completed the IBE registration process, but has not yet accessed their IBE email.
  A. The user has received an IBE notification email, but has not accessed the HTTPS URL or attachment yet.

• Question 7:

  Refer to the exhibit which shows an nslookup output of MX records of the example.com domain.

  

  Which two MTA selection behaviors for the example.com domain are correct? (Choose two.)

  A. mx.example.com will receive approximately twice the number of email as mx.hosted.com because of its preference value.
  B. The primary MTA for the example.com domain is mx.hosted.com.
  C. The external MTAs will send email to mx.example.com only if mx.hosted.com is unreachable.
  D. The PriNS server should receive all email for the example.com domain.
  B. The primary MTA for the example.com domain is mx.hosted.com.
  C. The external MTAs will send email to mx.example.com only if mx.hosted.com is unreachable.

• Question 8:

  While reviewing logs, an administrator discovers that an incoming email was processed using policy IDs 0:4:9:INTERNAL. Which two statements describe what this policy ID means? (Choose two.)

  A. Access control policy number 9 was used.
  B. The FortiMail configuration is missing an access delivery rule.
  C. The email was processed using IP-based policy ID 4.
  D. FortiMail is applying the default behavior for relaying inbound email.
  A. Access control policy number 9 was used.
  C. The email was processed using IP-based policy ID 4.

• Question 9:

  What are two disadvantages of configuring the dictionary and DLP scan rule aggressiveness too high? (Choose two.)

  A. High aggressiveness scan settings do not support executable file types.
  B. It is more resource intensive
  C. More false positives could be detected.
  D. FortiMail requires more disk space for the additional rules.
  B. It is more resource intensive
  C. More false positives could be detected.

• Question 10:

  A FortiMail is configured with the protected domain example.com.

  On this FortiMail, which two envelope addresses are considered incoming? (Choose two.)

  A. MAIL FROM: mis@hosted.net RCPT TO: noc@example.com
  B. MAIL FROM: accounts@example.com RCPT TO: sales@external.org
  C. MAIL FROM: support@example.com RCPT TO: marketing@example.com
  D. MAIL FROM: training@external.org RCPT TO: students@external.org
  A. MAIL FROM: mis@hosted.net RCPT TO: noc@example.com
  C. MAIL FROM: support@example.com RCPT TO: marketing@example.com