Start your NSE6_FML-6.4 Exam Questions Preparation with Updated 57 Questions
A Fully Updated 2023 NSE6_FML-6.4 Exam Dumps - PDF Questions and Testing Engine
NEW QUESTION 27
An organization has different groups of users with different needs in email functionality, such as address book access, mobile device access, email retention periods, and disk quotas.
Which FortiMail feature specific to server mode can be used to accomplish this?
- A. Resource profiles
- B. Access profiles
- C. Domain-level service settings
- D. Address book management options
Answer: A
NEW QUESTION 28
Examine the FortiMail antivirus action profile shown in the exhibit; then answer the question below.
What is the expected outcome if FortiMail applies this action profile to an email? (Choose two.)
- A. The sanitized email will be sent to the recipient's personal quarantine
- B. A replacement message will be added to the email
- C. Virus content will be removed from the email
- D. The administrator will be notified of the virus detection
Answer: B,C
NEW QUESTION 29
Examine the FortiMail archiving policies shown in the exhibit; then answer the question below.
Which of the following statements is true regarding this configuration? (Choose two.)
- A. Only the [email protected] account will be able to access the archived email
- B. Spam email will be exempt from archiving
- C. Archived email will be saved in the journal account
- D. Email sent from [email protected] will be archived
Answer: B,C
NEW QUESTION 30
Refer to the exhibit.
Which configuration change must you make to block an offending IP address temporarily?
- A. Add the offending IP address to the system block list
- B. Add the offending IP address to the domain block list
- C. Add the offending IP address to the user block list
- D. Change the authentication reputation setting status to Enable
Answer: D
NEW QUESTION 31
Refer to the exhibit.
What IP address should the DNS MX record for this deployment resolve to?
- A. 172.16.32.57
- B. 172.16.32.56
- C. 172.16.32.55
- D. 172.16.32.1
Answer: C
NEW QUESTION 32
Refer to the exhibit.
What two archiving actions will FortiMail take when email messages match these archive policies? (Choose two.)
- A. FortiMail will allow only the [email protected] account to access the archived email
- B. FortiMail will archive email sent from [email protected]
- C. FortiMail will exempt spam email from archiving
- D. FortiMail will save archived email in the journal account
Answer: A,D
NEW QUESTION 33
Which of the following statements are true regarding FortiMail's behavior when using the built-in MTA to process email in transparent mode? (Choose two.)
- A. FortiMail ignores the destination set by the sender and uses its own MX record lookup to deliver email
- B. If you disable the built-in MTA, FortiMail will use its transparent proxies to deliver email
- C. FortiMail can queue undeliverable messages and generate DSNs
- D. MUAs need to be configured to connect to the built-in MTA to send email
Answer: A,C
NEW QUESTION 34
While reviewing logs, an administrator discovers that an incoming email was processed using policy IDs 0:4:9.
Which two scenarios will generate this policy ID? (Choose two.)
- A. Email was processed using IP policy ID 4
- B. Incoming recipient policy ID 9 has the exclusive flag set
- C. FortiMail configuration is missing an access delivery rule
- D. FortiMail applies the default behavior for relaying inbound email
Answer: C,D
NEW QUESTION 35
Examine the FortiMail user webmail interface shown in the exhibit; then answer the question below.
Which one of the following statements is true regarding this server mode FortiMail's configuration?
- A. This user's account has a customized access profile applied that allows access to the personal address book
- B. The administrator has configured an inbound recipient policy with a customized resource profile
- C. The administrator has not made any changes to the default address book access privileges
- D. The protected domain-level service settings have been modified to allow access to the domain address book
Answer: B
Explanation:
domain address book can be enabled under resource profile which is applied to inbound recipient policy
NEW QUESTION 36
Examine the FortiMail recipient-based policy shown in the exhibit; then answer the question below.
After creating the policy, an administrator discovered that clients are able to send unauthenticated email using SMTP. What must be done to ensure clients cannot send unauthenticated email?
- A. Configure a matching IP policy with SMTP authentication and exclusive flag enabled
- B. Configure an access delivery rule to enforce authentication
- C. Move the recipient policy to the top of the list
- D. Configure an access receive rule to verify authentication status
Answer: B
NEW QUESTION 37
Refer to the exhibit.
The exhibit shows a FortiMail active-passive setup.
Which three actions are recommended when configuring the primary FortiMail HA interface? (Choose three.)
- A. In the Peer IP address field, type 172.16.32.57
- B. In the Heartbeat status drop-down list, select Primary
- C. In the Virtual IP action drop-down list, select Use
- D. In the Virtual IP address field, type 172.16.32.55/24
- E. Disable Enable port monitor
Answer: B,C,E
NEW QUESTION 38
Examine the FortiMail IBE service configuration shown in the exhibit; then answer the question below.
Which of the following statements describes the User inactivity expiry time of 90 days?
- A. First time IBE users must register to access their email within 90 days of receiving the notification email message
- B. After initial registration, IBE users can access the secure portal without authenticating again for 90 days
- C. Registered IBE users have 90 days from the time they receive a notification email message to access their IBE email
- D. IBE user accounts will expire after 90 days of inactivity, and must register again to access new IBE email message
Answer: D
NEW QUESTION 39
Which statement about how impersonation analysis identifies spoofed email addresses is correct?
- A. It uses DMARC validation to detect spoofed addresses.
- B. It maps the display name to the correct recipient email address.
- C. It uses behavior analysis to detect spoofed addresses.
- D. It uses SPF validation to detect spoofed addresses.
Answer: C
NEW QUESTION 40
What three configuration steps are required to enable DKIM signing for outbound messages on FortiMail? (Choose three.)
- A. Generate a public/private key pair in the protected domain configuration
- B. Publish the public key as a TXT record in a public DNS server
- C. Enable DKIM check in a matching antispam profile
- D. Enable DKIM check in a matching session profile
- E. Enable DKIM signing for outgoing messages in a matching session profile
Answer: A,B,D
NEW QUESTION 41
Refer to the exhibit.
Which two statements about how the transparent mode FortiMail device routes email for the example.com domain are true? (Choose two.)
- A. If incoming email messages are undeliverable, FML-1 can queue them to retry later
- B. FML-1 will use the built-in MTA for outgoing sessions
- C. If outgoing email messages are undeliverable, FM-1 can queue them to retry later
- D. FML-1 will use the transparent proxy for incoming sessions
Answer: C,D
NEW QUESTION 42
A FortiMail administrator is concerned about cyber criminals attempting to get sensitive information from employees using whaling phishing attacks.
What option can the administrator configure to prevent these types of attacks?
- A. Impersonation analysis
- B. Bounce tag verification
- C. Content disarm and reconstruction
- D. Dictionary profile with predefined smart identifiers
Answer: A
NEW QUESTION 43
Examine the FortiMail session profile and protected domain configuration shown in the exhibit; then answer the question below.
Which size limit will FortiMail apply to outbound email?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
Explanation:
domain only applies to inbound. https://kb.fortinet.com/kb/viewContent.do?externalId=FD31006&sliceId=1
NEW QUESTION 44
......
Easy Success Fortinet NSE6_FML-6.4 Exam in First Try: https://www.practicevce.com/Fortinet/NSE6_FML-6.4-practice-exam-dumps.html
Best NSE6_FML-6.4 Exam Dumps for the Preparation of Latest Exam Questions: https://drive.google.com/open?id=19Nj5-bOiSwn-TstH7NgZxL5QR4urii5W