NSE6_FML-6.0 Online Practice Questions and Answers

What are the configuration steps to enable DKIM signing for outbound messages on FortiMail? (Choose three.)

A. Enable DKIM signing for outgoing messages in a matching session profile

B. Publish the public key as a TXT record in a public DNS server

C. Enable DKIM check in a matching session profile

D. Enable DKIM check in a matching antispam profile

E. Generate a public/private key pair in the protected domain configuration

Which of the following statements are true regarding FortiMail's behavior when using the built-in MTA to process email in transparent mode? (Choose two.)

A. FortiMail can queue undeliverable messages and generate DSNs

B. If you disable the built-in MTA, FortiMail will use its transparent proxies to deliver email

C. FortiMail ignores the destination set by the sender and uses its own MX record lookup to deliver email

D. MUAs need to be configured to connect to the built-in MTA to send email

Examine the FortiMail topology and access receive rule shown in the exhibit; then answer the question below.

An administrator must enforce authentication on FML-1 for all outbound email from the example.com domain. Which of the following settings should be used to configure the access receive rule? (Choose two.)

A. The Sender IP/netmask should be set to 10.29.1.0/24

B. The Authentication status should be set to Authenticated

C. The Recipient pattern should be set o *@example.com

D. The Action should be set to Reject

Examine the FortiMail IBE service configuration shown in the exhibit; then answer the question below.

Which of the following statements describes the User inactivity expiry time of 90 days?

A. First time IBE users must register to access their email within 90 days of receiving the notification email message

B. After initial registration, IBE users can access the secure portal without authenticating again for 90 days

C. Registered IBE users have 90 days from the time they receive a notification email message to access their IBE email

D. IBE user accounts will expire after 90 days of inactivity, and must register again to access new IBE email message

Examine the FortiMail DLP scan rule shown in the exhibit; then answer the question below.

Which of the following statements is true regarding this configuration? (Choose two.)

A. An email message containing the words "Credit Card" in the subject will trigger this scan rule

B. If an email is sent from sales@internal.lab the action will be applied without matching any conditions

C. An email message containing credit card numbers in the body will trigger this scan rule

D. An email must contain credit card numbers in the body, attachment, and subject to trigger this scan rule

Examine the FortiMail archiving policies shown in the exhibit; then answer the question below.

Which of the following statements is true regarding this configuration? (Choose two.)

A. Spam email will be exempt from archiving

B. Email sent from marketing@example.com will be archived

C. Archived email will be saved in the journal account

D. Only the marketing@example.com account will be able to access the archived email

A FortiMail is configured with the protected domain "example.com". For this FortiMail, which of the following envelope addresses are considered incoming? (Choose two.)

A. MAIL FROM: training@external.org RCPT TO: students@external.org

B. MAIL FROM: support@example.com PCPT TO: marketing@example.com

C. MAIL FROM: mis@hosted.net RCPT TO: noc@example.com

D. MAIL FROM: accounts@example.com RCPT TO: sales@external.org

Which of the following antispam techniques queries FortiGuard for rating information? (Choose two.)

A. URI filter

B. IP reputation

C. SURBL

D. DNSBL

Examine the FortiMail topology and IP-based policy shown in the exhibit; then answer the question below.

An administrator has enabled the sender reputation feature in the Example_Session profile on FML-1. After a few hours, the deferred queue on the Mail Server started filing up with undeliverable email. What changes should the administrator make to fix this issue? (Choose two.)

A. Clear the sender reputation database using the CLI

B. Create an outbound recipient policy to bypass outbound email from session profile inspections

C. Disable the exclusive flag in IP policy ID 1

D. Apply a session profile with sender reputation disabled on a separate IP policy for outbound sessions

An organization has different groups of users with different needs in email functionality, such as address book access, mobile device access, email retention periods, and disk quotas. Which FortiMail feature specific to server mode can be used to accomplish this?

A. Resource profiles

B. Address book management options

C. Access profiles

D. Domain-level service settings