NSE6_FML-6.0 Online Practice Questions and Answers

FortiMail is configured with the protected domain "example.com". Identify which of the following envelope addresses will require an access receive rule to relay for unauthenticated senders? (Choose two.)

A. MAIL FROM: mis@hosted.net RCPT TO: noc@example.com

B. MAIL FROM: training@external.org RCPT TO: students@external.org

C. MAIL FROM: accounts@example.com RCPT TO: sales@exernal.org

D. MAIL FROM: support@example.com RCPT TO: marketing@example.com

Examine the nslookup output shown in the exhibit; then answer the question below.

Identify which of the following statements is true regarding the example.com domain's MTAs. (Choose two.)

A. External MTAs will send email to mx.example.com only if mx.hosted.com is unreachable

B. The primary MTA for the example.com domain is mx.hosted.com

C. The PriNS server should receive all email for the example.com domain

D. The higher preference value is used to load balance more email to the mx.example.com MTA

Examine the FortiMail active-passive cluster shown in the exhibit; then answer the question below.

Which of the following parameters are recommended for the Primary FortiMail's HA interface configuration? (Choose three.)

A. Enable port monitor: disable

B. Peer IP address: 172.16.32.57

C. Heartbeat status: Primary

D. Virtual IP address: 172.16.32.55/24

E. Virtual IP action: Use

Which of the following CLI commands, if executed, will erase all data on the log disk partition? (Choose two.)

A. execute formatmaildisk

B. execute formatmaildisk_backup

C. execute formatlogdisk

D. execute partitionlogdisk 40

Which of the following statements are true regarding FortiMail's behavior when using the built-in MTA to process email in transparent mode? (Choose two.)

A. FortiMail can queue undeliverable messages and generate DSNs

B. If you disable the built-in MTA, FortiMail will use its transparent proxies to deliver email

C. FortiMail ignores the destination set by the sender and uses its own MX record lookup to deliver email

D. MUAs need to be configured to connect to the built-in MTA to send email

What IP address should the DNS MX record for this deployment resolve to?

A. 172.16.32.1

B. 172.16.32.57

C. 172.16.32.55

D. 172.16.32.56

Examine the message column of a log cross search result of an inbound email shown in the exhibit; then answer the question below

Based on logs, which of the following statements are true? (Choose two.)

A. The FortiMail is experiencing issues delivering the email to the back-end mail server

B. The logs were generated by a server mode FortiMail

C. The logs were generated by a gateway or transparent mode FortiMail

D. The FortiMail is experiencing issues accepting the connection from the remote sender

Examine the FortiMail DLP scan rule shown in the exhibit; then answer the question below.

Which of the following statements is true regarding this configuration? (Choose two.)

A. An email message containing the words "Credit Card" in the subject will trigger this scan rule

B. If an email is sent from sales@internal.lab the action will be applied without matching any conditions

C. An email message containing credit card numbers in the body will trigger this scan rule

D. An email must contain credit card numbers in the body, attachment, and subject to trigger this scan rule

Which of the following statements regarding SMTPS and SMTP over TLS are true? (Choose three.)

A. In an SMTPS session, the identities of both sender and receiver are encrypted

B. SMTPS connections are initiated on port 465

C. SMTP over TLS connections are entirely encrypted and initiated on port 465

D. The STARTTLS command is used to initiate SMTP over TLS

E. SMTPS encrypts the body of the email message, where the most sensitive content exists

Which firmware upgrade method for an active-passive HA cluster ensures service outage is minimal and there are no unnecessary failovers?

A. Upgrade the active unit, which will upgrade the standby unit automatically

B. Upgrade both units at the same time

C. Upgrade the standby unit, and then upgrade the active unit

D. Break the cluster, upgrade the units independently, and then form the cluster again as quickly as possible