Fortinet Exam 2023 NSE6_FML-6.4 Dumps Updated Questions UPDATED Mar-2023
Get The Most Updated NSE6_FML-6.4 Dumps To NSE 6 Network Security Specialist Certification
NEW QUESTION 24
Which statement about how impersonation analysis identifies spoofed email addresses is correct?
- A. It uses DMARC validation to detect spoofed addresses.
- B. It uses behavior analysis to detect spoofed addresses.
- C. It uses SPF validation to detect spoofed addresses.
- D. It maps the display name to the correct recipient email address.
Answer: B
NEW QUESTION 25
Examine the FortiMail archiving policies shown in the exhibit; then answer the question below.
Which of the following statements is true regarding this configuration? (Choose two.)
- A. Archived email will be saved in the journal account
- B. Spam email will be exempt from archiving
- C. Email sent from [email protected] will be archived
- D. Only the [email protected] account will be able to access the archived email
Answer: A,B
NEW QUESTION 26
Refer to the exhibit.
Which configuration change must you make to block an offending IP address temporarily?
- A. Add the offending IP address to the user block list
- B. Add the offending IP address to the system block list
- C. Change the authentication reputation setting status to Enable
- D. Add the offending IP address to the domain block list
Answer: C
NEW QUESTION 27
Refer to the exhibit.
An administrator must enforce authentication on FML-1 for all outbound email from the example.com domain. Which two settings should be used to configure the access receive rule? (Choose two.)
- A. The Authentication status should be set to Authenticated
- B. The Sender IP/netmask should be set to 10.29.1.0/24
- C. The Recipient pattern should be set to *@example.com
- D. The Action should be set to Reject
Answer: A,B
NEW QUESTION 28
Refer to the exhibit.
MTA-1 is delivering an email intended for User 1 to MTA-2.
Which two statements about protocol usage between the devices are true? (Choose two.)
- A. MTA-1 will use SMTP to deliver the email message to MTA-2
- B. MTA-2 will use IMAP to receive the email message from MTA-1
- C. User 1 will use logs were generated load the email message from MTA-2
- D. MTA-1 will use POP3 to deliver the email message to User 1 directly
Answer: A,C
NEW QUESTION 29
A FortiMail is configured with the protected domain example.com.
On this FortiMail, which two envelope addresses are considered incoming? (Choose two.)
- A. MAIL FROM: [email protected] RCPT TO: [email protected]
- B. MAIL FROM: [email protected] RCPT TO: [email protected]
- C. MAIL FROM: [email protected] RCPT TO: [email protected]
- D. MAIL FROM: [email protected] RCPT TO: [email protected]
Answer: B,D
NEW QUESTION 30
Refer to the exhibit.
Which two statements about how the transparent mode FortiMail device routes email for the example.com domain are true? (Choose two.)
- A. If incoming email messages are undeliverable, FML-1 can queue them to retry later
- B. If outgoing email messages are undeliverable, FM-1 can queue them to retry later
- C. FML-1 will use the transparent proxy for incoming sessions
- D. FML-1 will use the built-in MTA for outgoing sessions
Answer: B,C
NEW QUESTION 31
FortiMail is configured with the protected domain example.com.
Which two envelope addresses will require an access receive rule, to relay for unauthenticated senders? (Choose two.)
- A. MAIL FROM: [email protected] RCPT TO: [email protected]
- B. MAIL FROM: [email protected] RCPT TO: [email protected]
- C. MAIL FROM: [email protected] RCPT TO: [email protected]
- D. MAIL FROM: [email protected] RCPT TO: [email protected]
Answer: B,D
NEW QUESTION 32
Which of the following statements are true regarding FortiMail's behavior when using the built-in MTA to process email in transparent mode? (Choose two.)
- A. If you disable the built-in MTA, FortiMail will use its transparent proxies to deliver email
- B. FortiMail ignores the destination set by the sender and uses its own MX record lookup to deliver email
- C. MUAs need to be configured to connect to the built-in MTA to send email
- D. FortiMail can queue undeliverable messages and generate DSNs
Answer: B,D
NEW QUESTION 33
Examine the FortiMail IBE service configuration shown in the exhibit; then answer the question below.
Which of the following statements describes the User inactivity expiry time of 90 days?
- A. First time IBE users must register to access their email within 90 days of receiving the notification email message
- B. IBE user accounts will expire after 90 days of inactivity, and must register again to access new IBE email message
- C. Registered IBE users have 90 days from the time they receive a notification email message to access their IBE email
- D. After initial registration, IBE users can access the secure portal without authenticating again for 90 days
Answer: B
NEW QUESTION 34
Which two features are available when you enable HA centralized monitoring on FortiMail? (Choose two.)
- A. Mail statistics of all cluster members on the primary device.
- B. Policy configuration changes of all cluster members from the primary device.
- C. Cross-device log searches across all cluster members from the primary device.
- D. Firmware update of all cluster members from the primary device.
Answer: A,C
NEW QUESTION 35
Refer to the exhibit.
What are two expected outcomes if FortiMail applies this antivirus action profile to an email? (Choose two.)
- A. A replacement message will be added to the email
- B. Virus content will be removed from the email
- C. The administrator will be notified of the virus detection
- D. The sanitized email will be sent to the recipient's personal quarantine
Answer: A,D
NEW QUESTION 36
Refer to the exhibit.
Which message size limit will FortiMail apply to the outbound email?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
NEW QUESTION 37
Refer to the exhibit.
Which statement describes the pre-registered status of the IBE user [email protected]?
- A. The user has completed the IBE registration process, but has not yet accessed their IBE email.
- B. The user was registered by an administrator in anticipation of IBE participation.
- C. The user account has been de-activated, and the user must register again the next time they receive an IBE email.
- D. The user has received an IBE notification email, but has not accessed the HTTPS URL or attachment yet.
Answer: A
NEW QUESTION 38
What three configuration steps are required to enable DKIM signing for outbound messages on FortiMail? (Choose three.)
- A. Publish the public key as a TXT record in a public DNS server
- B. Generate a public/private key pair in the protected domain configuration
- C. Enable DKIM signing for outgoing messages in a matching session profile
- D. Enable DKIM check in a matching antispam profile
- E. Enable DKIM check in a matching session profile
Answer: A,B,E
NEW QUESTION 39
A FortiMail administrator is investigating a sudden increase in DSNs being delivered to the protected domain for undeliverable email messages. After searching the logs, the administrator identifies that the DSNs were not generated as a result of any outbound email sent from the protected domain.
Which FortiMail antispam technique can the administrator use to prevent this scenario?
- A. Spoofed header detection
- B. Bounce address tag validation
- C. FortiGuard IP Reputation
- D. Spam outbreak protection
Answer: D
NEW QUESTION 40
Examine the FortiMail antivirus action profile shown in the exhibit; then answer the question below.
What is the expected outcome if FortiMail applies this action profile to an email? (Choose two.)
- A. A replacement message will be added to the email
- B. Virus content will be removed from the email
- C. The administrator will be notified of the virus detection
- D. The sanitized email will be sent to the recipient's personal quarantine
Answer: A,B
NEW QUESTION 41
Which two CLI commands, if executed, will erase all data on the log disk partition? (Choose two.)
- A. execute formatmaildisk
- B. execute partitionlogdisk 40
- C. execute formatlogdisk
- D. execute formatmaildisk_backup
Answer: B,C
NEW QUESTION 42
......
Fortinet Certified NSE6_FML-6.4 Dumps Questions Valid NSE6_FML-6.4 Materials: https://www.passleadervce.com/NSE-6-Network-Security-Specialist/reliable-NSE6_FML-6.4-exam-learning-guide.html