NSE6_FML-6.4: Fortinet.NSE6_FML-6.4.VCEplus.2022-09-02.56q.vcex

Refer to the exhibit.

Which configuration change must you make to block an offending IP address temporarily?

Add the offending IP address to the system block list
Add the offending IP address to the user block list
Add the offending IP address to the domain block list
Change the authentication reputation setting status to Enable

Correct answer: D

Explanation:

Reference: https://help.fortinet.com/fweb/550/Content/FortiWeb/fortiweb-admin/blacklisting.htm

Refer to the exhibit.

Which statement describes the pre-registered status of the IBE user [email protected]?

The user has received an IBE notification email, but has not accessed the HTTPS URL orattachment yet.
The user account has been de-activated, and the user must register again the next time they receive an IBE email.
The user was registered by an administrator in anticipation of IBE participation.
The user has completed the IBE registration process, but has not yet accessed their IBE email.

Correct answer: D

Explanation:

Reference: https://docs.fortinet.com/document/fortimail/6.4.2/administrationguide/470401/configuring-ibe- users

Refer to the exhibit.

MTA-1 is delivering an email intended for User 1 to MTA-2.

Which two statements about protocol usage between the devices are true? (Choose two.)

User 1 will use logs were generated load the email message from MTA-2
MTA-2 will use IMAP to receive the email message from MTA-1
MTA-1 will use POP3 to deliver the email message to User 1 directly
MTA-1 will use SMTP to deliver the email message to MTA-2

Correct answer: AD

An administrator sees that an excessive amount of storage space on a FortiMail device is being used up by quarantine accounts for invalid users. The FortiMail is operating in transparent mode.

Which two FortiMail features can the administrator configure to tackle this issue? (Choose two.)

Automatic removal of quarantine accounts
Recipient address verification
Bounce address tag verification
Sender address rate control

Correct answer: AD

Explanation:

Reference: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/9aa62d26-858d-11ea- 9384-00505692583a/FortiMail-6.4.0-Administration_Guide.pdf(322, 323)

FortiMail is configured with the protected domain example.com.

Which two envelope addresses will require an access receive rule, to relay for unauthenticated senders? (Choose two.)

MAIL FROM: [email protected] RCPT TO: [email protected]
MAIL FROM: [email protected] RCPT TO: [email protected]
MAIL FROM: [email protected] RCPT TO: [email protected]
MAIL FROM: [email protected] RCPT TO: [email protected]

Correct answer: BD

Which two antispam techniques query FortiGuard for rating information? (Choose two.)

DNSBL
SURBL
IP reputation
URI filter

Correct answer: AB

Explanation:

Reference: https://docs.fortinet.com/document/fortimail/6.4.0/administrationguide/352990/configuring- antispam-profiles-and-antispam-action-profiles

What three configuration steps are required to enable DKIM signing for outbound messages on FortiMail? (Choose three.)

Generate a public/private key pair in the protected domain configuration
Enable DKIM check in a matching session profile
Enable DKIM check in a matching antispam profile
Publish the public key as a TXT record in a public DNS server
Enable DKIM signing for outgoing messages in a matching session profile

Correct answer: ABD

Which three statements about SMTPS and SMTP over TLS are true? (Choose three.)

SMTP over TLS connections are entirely encrypted and initiated on port 465
SMTPS encrypts the identities of both the sender and receiver
The STARTTLS command is used to initiate SMTP over TLS
SMTPS encrypts only the body of the email message
SMTPS connections are initiated on port 465

Correct answer: BCE

Explanation:

Reference: https://docs.fortinet.com/document/fortimail/6.2.0/administrationguide/807960/fortimail-support-of- tls-ssl

Refer to the exhibit.

Which two statements about the MTAs of the domain example.com are true? (Choose two.)

The external MTAs will send email to mx.example.com only if mx.hosted.com is unreachable
The PriNS server should receive all email for the example.com domain
The primary MTA for the example.com domain is mx.hosted.com
The higher preference value is used to load balance more email to the mx.example.com MTA

Correct answer: AC

Refer to the exhibit.