Free VMware Fortinet NSE 6 – FortiMail 6.2 Exam NSE6_FML-6.2 Exam Practice Test

An organization has different groups of users with different needs in email functionality, such as address book access, mobile device access, email retention periods, and disk quotas.Which FortiMail feature specific to server mode can be used to accomplish this?

• Resource profiles
• Domain-level service settings
• Access profiles
• Address book management options

Which two CLI commands, if executed, will erase all data on the log disk partition? (Choose two.)

• execute formatmaildisk
• execute formatmaildisk_backup
• execute formatlogdisk
• execute partitionlogdisk 40

Which of the following statements are true regarding FortiMail's behavior when using the built-in MTA to process email in transparent mode? (Choose two.)

• FortiMail can queue undeliverable messages and generate DSNs
• If you disable the built-in MTA, FortiMail will use its transparent proxies to deliver email
• FortiMail ignores the destination set by the sender and uses its own MX record lookup to deliver email
• MUAs need to be configured to connect to the built-in MTA to send email

Which firmware upgrade method for an active-passive HA cluster ensures service outage is minimal, and there are no unnecessary failovers?

• Break the cluster, upgrade the units independently, and then form the cluster
• Upgrade both units at the same time
• Upgrade the standby unit, and then upgrade the active unit
• Upgrade the active unit, which will upgrade the standby unit automatically

Which of the following antispam techniques queries FortiGuard for rating information? (Choose two.)

• URI filter
• IP reputation
• SURBL
• DNSBL

Which three statements about SMTPS and SMTP over TLS are true? (Choose three.)

• SMTP over TLS connections are entirely encrypted and initiated on port 465
• SMTPS encrypts the identities of both the sender and receiver
• The STARTTLS command is used to initiate SMTP over TLS
• SMTPS encrypts only the body of the email message
• SMTPS connections are initiated on port 465

FortiMail is configured with the protected domain example.com.Which two envelope addresses will require an access receive rule, to relay for unauthenticated senders? (Choose two.)

• MAIL FROM: accounts@example.com RCPT TO: sales@external.org
• MAIL FROM: support@example.com RCPT TO: marketing@example.com
• MAIL FROM: training@external.org RCPT TO: students@external.org
• MAIL FROM: mis@hosted.net RCPT TO: noc@example.com

What three configuration steps are required to enable DKIM signing for outbound messages on FortiMail? (Choose three.)

• Generate a public/private key pair in the protected domain configuration
• Enable DKIM check in a matching session profile
• Enable DKIM check in a matching antispam profile
• Publish the public key as a TXT record in a public DNS server
• Enable DKIM signing for outgoing messages in a matching session profile

A FortiMail administrator is investigating a sudden increase in DSNs being delivered to the protected domain for undeliverable email messages. After searching the logs, the administrator identifies that the DSNs were not generated as a result of any outbound email sent from the protected domain.Which FortiMail antispam technique can the administrator use to prevent this scenario?

• Spam outbreak protection
• Bounce address tag validation
• Spoofed header detection
• FortiGuard IP Reputation

Which FortiMail option removes embedded code components in Microsoft Word, while maintaining the original file format?

• Behavior analysis
• Impersonation analysis
• Content disarm and reconstruction
• Header analysis