New 2023 Latest Questions NSE6_FML-6.4 Dumps - Use Updated Fortinet Exam
Latest NSE6_FML-6.4 Exam Dumps Fortinet Exam from Training Expert RealValidExam
NEW QUESTION 14
Examine the FortiMail user webmail interface shown in the exhibit; then answer the question below.
Which one of the following statements is true regarding this server mode FortiMail's configuration?
- A. The administrator has configured an inbound recipient policy with a customized resource profile
- B. The administrator has not made any changes to the default address book access privileges
- C. The protected domain-level service settings have been modified to allow access to the domain address book
- D. This user's account has a customized access profile applied that allows access to the personal address book
Answer: A
Explanation:
domain address book can be enabled under resource profile which is applied to inbound recipient policy
NEW QUESTION 15
Refer to the exhibit.
Which of the following statements are true regarding the transparent mode FortiMail's email routing for the example.com domain? (Choose two.)
- A. If incoming email are undeliverable, FML-1 can queue them to retry again later
- B. FML-1 will use the built-in MTA for outgoing sessions
- C. If outgoing email messages are undeliverable, FML-1 can queue them to retry later
- D. FML-1 will use the transparent proxy for incoming sessions
Answer: A,D
NEW QUESTION 16
Refer to the exhibit.
Which two statements about the MTAs of the domain example.com are true? (Choose two.)
- A. The primary MTA for the example.com domain is mx.hosted.com
- B. The PriNS server should receive all email for the example.com domain
- C. The external MTAs will send email to mx.example.com only if mx.hosted.com is unreachable
- D. The higher preference value is used to load balance more email to the mx.example.com MTA
Answer: A,C
NEW QUESTION 17
Examine the FortiMail active-passive cluster shown in the exhibit; then answer the question below.
Which of the following parameters are recommended for the Primary FortiMail's HA interface configuration? (Choose three.)
- A. Peer IP address: 172.16.32.57
- B. Virtual IP address: 172.16.32.55/24
- C. Enable port monitor: disable
- D. Virtual IP action: Use
- E. Heartbeat status: Primary
Answer: B,D,E
NEW QUESTION 18
Examine the FortiMail IBE service configuration shown in the exhibit; then answer the question below.
Which of the following statements describes the User inactivity expiry time of 90 days?
- A. IBE user accounts will expire after 90 days of inactivity, and must register again to access new IBE email message
- B. First time IBE users must register to access their email within 90 days of receiving the notification email message
- C. After initial registration, IBE users can access the secure portal without authenticating again for 90 days
- D. Registered IBE users have 90 days from the time they receive a notification email message to access their IBE email
Answer: A
NEW QUESTION 19
Which two features are available when you enable HA centralized monitoring on FortiMail? (Choose two.)
- A. Firmware update of all cluster members from the primary device.
- B. Cross-device log searches across all cluster members from the primary device.
- C. Mail statistics of all cluster members on the primary device.
- D. Policy configuration changes of all cluster members from the primary device.
Answer: B,C
NEW QUESTION 20
FortiMail is configured with the protected domain example.com.
Which two envelope addresses will require an access receive rule, to relay for unauthenticated senders? (Choose two.)
- A. MAIL FROM: [email protected] RCPT TO: [email protected]
- B. MAIL FROM: [email protected] RCPT TO: [email protected]
- C. MAIL FROM: [email protected] RCPT TO: [email protected]
- D. MAIL FROM: [email protected] RCPT TO: [email protected]
Answer: C,D
NEW QUESTION 21
Which statement about how impersonation analysis identifies spoofed email addresses is correct?
- A. It uses behavior analysis to detect spoofed addresses.
- B. It uses DMARC validation to detect spoofed addresses.
- C. It maps the display name to the correct recipient email address.
- D. It uses SPF validation to detect spoofed addresses.
Answer: A
NEW QUESTION 22
A FortiMail administrator is concerned about cyber criminals attempting to get sensitive information from employees using whaling phishing attacks.
What option can the administrator configure to prevent these types of attacks?
- A. Bounce tag verification
- B. Dictionary profile with predefined smart identifiers
- C. Impersonation analysis
- D. Content disarm and reconstruction
Answer: C
NEW QUESTION 23
An administrator sees that an excessive amount of storage space on a FortiMail device is being used up by quarantine accounts for invalid users. The FortiMail is operating in transparent mode.
Which two FortiMail features can the administrator configure to tackle this issue? (Choose two.)
- A. Automatic removal of quarantine accounts
- B. Bounce address tag verification
- C. Recipient address verification
- D. Sender address rate control
Answer: A,D
NEW QUESTION 24
Examine the FortMail mail server settings shown in the exhibit; then answer the question below.
Which of the following statements are true? (Choose two.)
- A. mx.example.com will drop any inbound plaintext SMTP connection
- B. mx.example.com will display STARTTLS as one of the supported commands in SMTP sessions
- C. mx.example.com will accept SMTPS connections
- D. mx.example.com will enforce SMTPS on all outbound sessions
Answer: B,C
NEW QUESTION 25
Examine the nslookup output shown in the exhibit; then answer the question below.
Identify which of the following statements is true regarding the example.com domain's MTAs. (Choose two.)
- A. The primary MTA for the example.com domain is mx.hosted.com
- B. External MTAs will send email to mx.example.com only if mx.hosted.com is unreachable
- C. The PriNS server should receive all email for the example.com domain
- D. The higher preference value is used to load balance more email to the mx.example.com MTA
Answer: A,B
NEW QUESTION 26
Examine the FortiMail recipient-based policy shown in the exhibit; then answer the question below.
After creating the policy, an administrator discovered that clients are able to send unauthenticated email using SMTP. What must be done to ensure clients cannot send unauthenticated email?
- A. Configure a matching IP policy with SMTP authentication and exclusive flag enabled
- B. Configure an access delivery rule to enforce authentication
- C. Move the recipient policy to the top of the list
- D. Configure an access receive rule to verify authentication status
Answer: B
NEW QUESTION 27
Examine the FortiMail session profile and protected domain configuration shown in the exhibit; then answer the question below.
Which size limit will FortiMail apply to outbound email?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
Explanation:
domain only applies to inbound. https://kb.fortinet.com/kb/viewContent.do?externalId=FD31006&sliceId=1
NEW QUESTION 28
Examine the message column of a log cross search result of an inbound email shown in the exhibit; then answer the question below
Based on logs, which of the following statements are true? (Choose two.)
- A. The FortiMail is experiencing issues accepting the connection from the remote sender
- B. The logs were generated by a server mode FortiMail
- C. The logs were generated by a gateway or transparent mode FortiMail
- D. The FortiMail is experiencing issues delivering the email to the back-end mail server
Answer: C,D
NEW QUESTION 29
Refer to the exhibit.
It is recommended that you configure which three access receive settings to allow outbound email from the example.com domain on FML-1? (Choose three.)
- A. The Enable check box should be cleared
- B. The Sender pattern should be set to *@example.com
- C. The Recipient pattern should be set to 10.29.1.45/24
- D. The Action should be set to Relay
- E. The Sender IP/netmask should be set to 10.29.1.45/32
Answer: A,D,E
NEW QUESTION 30
While testing outbound MTA functionality, an administrator discovers that all outbound email is being processed using policy IDs 1:2:0.
Which two reasons explain why the last policy ID value is 0? (Choose two.)
- A. IP policy ID 2 has the exclusive flag set
- B. There are no access delivery rules configured for outbound email
- C. There are no outgoing recipient policies configured
- D. Outbound email is being rejected
Answer: B,C
NEW QUESTION 31
Refer to the exhibit.
What are two expected outcomes if FortiMail applies this antivirus action profile to an email? (Choose two.)
- A. Virus content will be removed from the email
- B. The administrator will be notified of the virus detection
- C. The sanitized email will be sent to the recipient's personal quarantine
- D. A replacement message will be added to the email
Answer: C,D
NEW QUESTION 32
If you are using the built-in MTA to process email in transparent mode, which two statements about FortiMail behavior are true? (Choose two.)
- A. FortiMail ignores the destination set by the sender, and uses its own MX record lookup to deliver email
- B. MUAs need to be configured to connect to the built-in MTA to send email
- C. FortiMail can queue undeliverable messages and generate DSNs
- D. If you disable the built-in MTA, FortiMail will use its transparent proxies to deliver email
Answer: A,C
NEW QUESTION 33
Examine the FortiMail antivirus action profile shown in the exhibit; then answer the question below.
What is the expected outcome if FortiMail applies this action profile to an email? (Choose two.)
- A. The sanitized email will be sent to the recipient's personal quarantine
- B. Virus content will be removed from the email
- C. The administrator will be notified of the virus detection
- D. A replacement message will be added to the email
Answer: B,D
NEW QUESTION 34
Refer to the exhibit.
Which configuration change must you make to block an offending IP address temporarily?
- A. Add the offending IP address to the user block list
- B. Add the offending IP address to the system block list
- C. Change the authentication reputation setting status to Enable
- D. Add the offending IP address to the domain block list
Answer: C
NEW QUESTION 35
Refer to the exhibit.
Which two statements about how the transparent mode FortiMail device routes email for the example.com domain are true? (Choose two.)
- A. If incoming email messages are undeliverable, FML-1 can queue them to retry later
- B. FML-1 will use the built-in MTA for outgoing sessions
- C. If outgoing email messages are undeliverable, FM-1 can queue them to retry later
- D. FML-1 will use the transparent proxy for incoming sessions
Answer: C,D
NEW QUESTION 36
......
Updated Test Engine to Practice NSE6_FML-6.4 Dumps & Practice Exam: https://officialdumps.realvalidexam.com/NSE6_FML-6.4-real-exam-dumps.html
