NSE6_FML-6.2 Online Practice Questions and Answers

Refer to the exhibit.

Which configuration change must you make to block an offending IP address temporarily?

A. Add the offending IP address to the system block list

B. Add the offending IP address to the user block list

C. Add the offending IP address to the domain block list

D. Change the authentication reputation setting status to Enable

Refer to the exhibit.

Which statement describes the pre-registered status of the IBE user extuser2@external.lab?

A. The user has received an IBE notification email, but has not accessed the HTTPS URL or attachment yet.

B. The user account has been de-activated, and the user must register again the next time they receive an IBE email.

C. The user was registered by an administrator in anticipation of IBE participation.

D. The user has completed the IBE registration process, but has not yet accessed their IBE email.

What three configuration steps are required to enable DKIM signing for outbound messages on FortiMail? (Choose three.)

A. Generate a public/private key pair in the protected domain configuration

B. Enable DKIM check in a matching session profile

C. Enable DKIM check in a matching antispam profile

D. Publish the public key as a TXT record in a public DNS server

E. Enable DKIM signing for outgoing messages in a matching session profile

Which three statements about SMTPS and SMTP over TLS are true? (Choose three.)

A. SMTP over TLS connections are entirely encrypted and initiated on port 465

B. SMTPS encrypts the identities of both the sender and receiver

C. The STARTTLS command is used to initiate SMTP over TLS

D. SMTPS encrypts only the body of the email message

E. SMTPS connections are initiated on port 465

If you are using the built-in MTA to process email in transparent mode, which two statements about FortiMail behavior are true? (Choose two.)

A. MUAs need to be configured to connect to the built-in MTA to send email

B. If you disable the built-in MTA, FortiMail will use its transparent proxies to deliver email

C. FortiMail can queue undeliverable messages and generate DSNs

D. FortiMail ignores the destination set by the sender, and uses its own MX record lookup to deliver email

Refer to the exhibit.

Which two message types will trigger this DLP scan rule? (Choose two.)

A. An email message with a subject that contains the term "credit card" will trigger this scan rule

B. An email that contains credit card numbers in the body, attachment, and subject will trigger this scan rule

C. An email message that contains credit card numbers in the body will trigger this scan rule

D. An email sent from sales@internal.lab will trigger this scan rule, even without matching any conditions

Refer to the exhibit.

An administrator has enabled the sender reputation feature in the Example_Session profile on FML-1. After a few hours, the deferred queue on the mail server starts filling up with undeliverable email. What two changes must the administrator make to fix this issue? (Choose two.)

A. Apply a session profile with sender reputation disabled on a separate IP policy for outbound sessions

B. Clear the sender reputation database using the CLI

C. Create an outbound recipient policy to bypass outbound email from session profile inspections

D. Disable the exclusive flag in IP policy ID 1

Refer to the exhibit.

The exhibit shows a FortiMail active-passive setup.

Which three actions are recommended when configuring the primary FortiMail HA interface? (Choose three.)

A. Disable Enable port monitor

B. In the Heartbeat status drop-down list, select Primary

C. In the Peer IP address field, type 172.16.32.57

D. In the Virtual IP action drop-down list, select Use

E. In the Virtual IP address field, type 172.16.32.55/24

Which two CLI commands, if executed, will erase all data on the log disk partition? (Choose two.)

A. execute formatmaildisk

B. execute formatmaildisk_backup

C. execute formatlogdisk

D. execute partitionlogdisk 40

An organization has different groups of users with different needs in email functionality, such as address book access, mobile device access, email retention periods, and disk quotas.

Which FortiMail feature specific to server mode can be used to accomplish this?

A. Resource profiles

B. Domain-level service settings

C. Access profiles

D. Address book management options