Fortinet NSE 6 NSE6_FML-6.4 Exam Actual Questions

dumps2022-09-14T01:45:47+08:00

NSE6_FML-6.4 exam is one of the required tests for Fortinet NSE 6 certification, which is valid for 2 years. In the real Fortinet NSE6_FML-6.4 exam, there are 30 questions, and you have 60 minutes to write all the questions. The available languages are English and Japanese. We provide the latest Fortinet NSE 6 NSE6_FML-6.4 exam actual questions, which are valid in the preparation. Free Fortinet NSE 6 NSE6_FML-6.4 exam actual questions are below.

Page 1 of 2

1. Which FortiMail option removes embedded code components in Microsoft Word, while maintaining the original file format?

Behavior analysis

Impersonation analysis

Content disarm and reconstruction

Header analysis

2. A FortiMail administrator is concerned about cyber criminals attempting to get sensitive information from employees using whaling phishing attacks.

What option can the administrator configure to prevent these types of attacks?

Impersonation analysis

Bounce tag verification

Content disarm and reconstruction

Dictionary profile with predefined smart identifiers

3. Which firmware upgrade method for an active-passive HA cluster ensures service outage is minimal, and there are no unnecessary failovers?

Break the cluster, upgrade the units independently, and then form the cluster

Upgrade both units at the same time

Upgrade the standby unit, and then upgrade the active unit

Upgrade the active unit, which will upgrade the standby unit automatically

4. Refer to the exhibit.

Which message size limit will FortiMail apply to the outbound email?

204800

1024

51200

10240

5. A FortiMail is configured with the protected domain example.com.

On this FortiMail, which two envelope addresses are considered incoming? (Choose two.)

MAIL FROM: [email protected] RCPT TO: [email protected]

6. What three configuration steps are required to enable DKIM signing for outbound messages on FortiMail? (Choose three.)

Generate a public/private key pair in the protected domain configuration

Enable DKIM check in a matching session profile

Enable DKIM check in a matching antispam profile

Publish the public key as a TXT record in a public DNS server

Enable DKIM signing for outgoing messages in a matching session profile

7. Refer to the exhibit.

An administrator must enforce authentication on FML-1 for all outbound email from the example.com domain .

Which two settings should be used to configure the access receive rule? (Choose two.)

The Recipient pattern should be set to *@example.com

The Authentication status should be set to Authenticated

The Sender IP/netmask should be set to 10.29.1.0/24

The Action should be set to Reject

8. Which two CLI commands, if executed, will erase all data on the log disk partition? (Choose

two.)

execute formatmaildisk

execute formatmaildisk_backup

execute formatlogdisk

execute partitionlogdisk 40

9. Refer to the exhibit.

Which configuration change must you make to block an offending IP address temporarily?

Add the offending IP address to the system block list

Add the offending IP address to the user block list

Add the offending IP address to the domain block list

Change the authentication reputation setting status to Enable

10. Which two antispam techniques query FortiGuard for rating information? (Choose two.)

DNSBL

SURBL

IP reputation

URI filter

Page 2 of 2

11. If you are using the built-in MTA to process email in transparent mode, which two statements about FortiMail behavior are true? (Choose two.)

MUAs need to be configured to connect to the built-in MTA to send email

If you disable the built-in MTA, FortiMail will use its transparent proxies to deliver email

FortiMail can queue undeliverable messages and generate DSNs

FortiMail ignores the destination set by the sender, and uses its own MX record lookup to deliver email

12. While reviewing logs, an administrator discovers that an incoming email was processed using policy IDs 0:4:9.

Which two scenarios will generate this policy ID? (Choose two.)

Email was processed using IP policy ID 4

Incoming recipient policy ID 9 has the exclusive flag set

FortiMail applies the default behavior for relaying inbound email

FortiMail configuration is missing an access delivery rule

13. Refer to the exhibit.

Which two statements about email messages sent from User A to User B are correct? (Choose two.)

User A's MUA will perform a DNS MX record lookup to send the email message.

mx.example1.org will forward the email message to the MX record that has the lowest preference.

The DNS server will act as an intermediary MT

User B will retrieve the email message using either POP3 or IMA

14. A FortiMail administrator is investigating a sudden increase in DSNs being delivered to the protected domain for undeliverable email messages. After searching the logs, the administrator identifies that the DSNs were not generated as a result of any outbound email sent from the protected domain.

Which FortiMail antispam technique can the administrator use to prevent this scenario?

Spam outbreak protection

Bounce address tag validation

Spoofed header detection

FortiGuard IP Reputation

15. Refer to the exhibit.

Which two message types will trigger this DLP scan rule? (Choose two.)

An email message with a subject that contains the term “credit card” will trigger this scan rule

An email that contains credit card numbers in the body, attachment, and subject will trigger this scan rule

An email message that contains credit card numbers in the body will trigger this scan rule

An email sent from [email protected] will trigger this scan rule, even without matching any conditions

16. An administrator sees that an excessive amount of storage space on a FortiMail device is being used up by quarantine accounts for invalid users. The FortiMail is operating in transparent mode.

Which two FortiMail features can the administrator configure to tackle this issue? (Choose two.)

Automatic removal of quarantine accounts

Recipient address verification

Bounce address tag verification

Sender address rate control

17. Refer to the exhibit.

Which statement describes the pre-registered status of the IBE user [email protected]?

The user has received an IBE notification email, but has not accessed the HTTPS URL or attachment yet.

The user account has been de-activated, and the user must register again the next time they receive an IBE email.

The user was registered by an administrator in anticipation of IBE participation.

The user has completed the IBE registration process, but has not yet accessed their IBE email.

Fortinet NSE 6 NSE6_FML-6.4 Exam Actual Questions

Fortinet NSE 6 NSE6_FML-6.4 Exam Actual Questions

Share this post

Leave a Reply Cancel reply

Related Posts