Refer to the exhibit which shows a detailed history log view. Which two actions did FortiMail take on this email message? (Choose two.)

FortJMail replaced the virus content with a message

FortiMail modified the subject of the email message.

FortJMail replaced the virus content with a message

FortiMail modified the subject of the email message.

FortiMail forwarded the email to User 1 without scanning.

FortiMail sent the email message to User 1's personal quarantine.

A FortiMail administrator is concerned about cyber criminals attempting to get sensitive information from employees using whaling phishing attacks. What option can the administrator configure to prevent these types of attacks?

Dictionary profile with predefined smart identifiers

Content disarm and reconstruction

A FortiMail is configured with the protected domain example.com.On this FortiMail, which two envelope addresses are considered incoming? (Choose two.)

MAIL FROM: mis@hosted.net RCPT TO: noc@example.com

MAIL FROM: support@example.com RCPT TO: marketing@example.com

MAIL FROM: mis@hosted.net RCPT TO: noc@example.com

MAIL FROM: accounts@example.com RCPT TO: sales@external.org

MAIL FROM: support@example.com RCPT TO: marketing@example.com

MAIL FROM: training@external.org RCPT TO: students@external.org

Refer to the exhibits which show a topology diagram (Topology), and a configuration element (Access Control Rule). An administrator must enforce authentication on FML-1 for all outbound email from the example.com domain.Which two settings should be used to configure the access receive rule? (Choose two.)

The Sender IP/netmask should be set to 10.29.1.0/24.

The Authentication status should be set to Authenticated

The Sender IP/netmask should be set to 10.29.1.0/24.

The Action should be set to Reject

The Recipient pattern should be set to * @example. com.

The Authentication status should be set to Authenticated

Refer to the exhibit which displays a topology diagram. Which two statements describe the built-in bridge functionality on a transparent mode FortiMail? (Choose two.)

All bridge member interfaces belong to the same subnet as the management IP.

The management IP is permanently tied to port1, and port1 cannot be removed from the bridge.

If port1. is required to process SMTP traffic, it must be configured as a routed interface.

All bridge member interfaces belong to the same subnet as the management IP.

The management IP is permanently tied to port1, and port1 cannot be removed from the bridge.

Any bridge member interface can be removed from the bridge and configured as a routed interface.

Refer to the exhibit which displays the domain configuration of a transparent mode FortiMail device. Based on the exhibit, which two sessions are considered incoming sessions? (Choose two.)

DESTINATION IP: 172.16.32.56 MAIL FROM: mis@hosted.net RCPT TO: noc@example.com

DESTINATION IP: 172.16.32.56 MAIL FROM: support@example.com RCPT TO: marketing@example.com

DESTINATION IP: 172.16.32.56 MAIL FROM: mis@hosted.net RCPT TO: noc@example.com

DESTINATION IP: 192.168.54.10 MAIL FROM: accounts@example.com RCPT TO: sales@example.com

DESTINATION IP: 10.25.32.15 MAIL FROM: training@example.com RCPT TO: students@external.com

DESTINATION IP: 172.16.32.56 MAIL FROM: support@example.com RCPT TO: marketing@example.com

Refer to the exhibit, which shows an inbound recipient policy. After creating the policy shown in the exhibit, an administrator discovers that clients can send unauthenticated emails using SMTP.What must the administrator do to enforce authentication?

Configure an access receive rule to verily authentication status.

Move this incoming recipient policy to the top of the list.

Configure a matching IP policy with the exclusive flag enabled.

Configure an access delivery rule to enforce authentication.

Configure an access receive rule to verily authentication status.

Refer to the exhibits, which display a topology diagram (Topology) and two FortiMail device configurations (FML1 Configuration and FML2 Configuration). What is the expected outcome of SMTP sessions sourced from FML1 and destined for FML2?

FML1 will successfully establish an SMTPS session with FML2.

FML1 will fail to establish any connection with FML2.

FML1 will attempt to establish an SMTPS session with FML2. but fail and revert to standard SMTP.

FML1 will send the STARTTLS command in the SMTP session, which will be rejected by FML2.

FML1 will successfully establish an SMTPS session with FML2.

Refer to the exhibit which displays a history log entry. Why does the last field show SYSTEM in the Policy ID column?

The email did not match a recipient-based policy.

The email was dropped by a system blocklist.

The email matched a system-level authentication policy.

The email did not match a recipient-based policy.

Refer to the exhibit which shows an nslookup output of MX records of the example.com domain. Which two MTA selection behaviors for the example.com domain are correct? (Choose two.)

The primary MTA for the example.com domain is mx.hosted.com.

The external MTAs will send email to mx.example.com only if mx.hosted.com is unreachable.

mx.example.com will receive approximately twice the number of email as mx.hosted.com because of its preference value.

The primary MTA for the example.com domain is mx.hosted.com.

The external MTAs will send email to mx.example.com only if mx.hosted.com is unreachable.

The PriNS server should receive all email for the example.com domain.

While reviewing logs, an administrator discovers that an incoming email was processed using policy IDs 0:4:9:INTERNAL.Which two statements describe what this policy ID means? (Choose two.)

Access control policy number 9 was used.

The email was processed using IP-based policy ID 4.

Access control policy number 9 was used.

The FortiMail configuration is missing an access delivery rule.

The email was processed using IP-based policy ID 4.

FortiMail is applying the default behavior for relaying inbound email.

Refer to the exhibits showing SMTP limits (Session Profile --- SMTP Limits), and domain settings (Domain Settings, and Domain Settings --- Other) of a FortiMail device. Which message size limit in KB will the FortiMail apply to outbound email?

There is no message size limit for outbound email from a protected domain.

A FortiMail device is configured with the protected domain example.com.If none of the senders is authenticated, which two envelope addresses will require an access receive rule? (Choose two.)

MAIL FROM: support@example.org RCPT TO: marketing@example.com

MAIL FROM: mis@hosted.net RCPT TO: noc@example.com

MAIL FROM: support@example.org RCPT TO: marketing@example.com

MAIL FROM: mis@hosted.net RCPT TO: noc@example.com

MAIL FROM: accounts@example.com RCPT TO: sales@biz.example.com

MAIL FROM: training@example.com RCPT TO: students@external.org

Refer to the exhibit, which shows a topology diagram of two separate email domains. Which two statements correctly describe how an email message is delivered from User A to User B? (Choose two.)

mx.example1.org will forward the email message to the MX record that has the lowest preference.

User B will retrieve the email message using either POP3 or IMAP.

mx.example1.org will forward the email message to the MX record that has the lowest preference.

User B will retrieve the email message using either POP3 or IMAP.

User A's MUA will perform a DNS MX record lookup to send the email message.

The DNS server will act as an intermediary MTA.

Refer to the exhibit which shows the output of an email transmission using a telnet session. What are two correct observations about this SMTP session? (Choose two.)

The 'Subject' is part of the message header.

The '220 mx.internal.lab ESMTP Smtpd' message is part of the SMTP banner.

The SMTP envelope addresses are different from the message header addresses.

The '250 Message accepted for delivery' message is part of the message body.

The 'Subject' is part of the message header.

The '220 mx.internal.lab ESMTP Smtpd' message is part of the SMTP banner.

Which two features are available when you enable HA centralized monitoring on FortiMail? (Choose two.)

Mail statistics of all cluster members on the primary device.

Cross-device log searches across all cluster members from the primary device.

Policy configuration changes of all cluster members from the primary device.

Mail statistics of all cluster members on the primary device.

Cross-device log searches across all cluster members from the primary device.

Firmware update of all cluster members from the primary device

Refer to the exhibits which shows a DLP scan profile configuration (DLP Scan Rule 1 and DLP Scan Rule 2) from a FortiMail device. Which two message types will trigger this DLP scan rule? (Choose two.)

An email message with a subject that contains the term 'credit card' will trigger this scan rule.

An email message that contains credit card numbers in the body will trigger this scan rule.

An email that contains credit card numbers in the body, attachment, and subject will trigger this scan rule.

An email sent from salesdinternal. lab will trigger this scan rule, even without matching any conditions.

An email message with a subject that contains the term 'credit card' will trigger this scan rule.

An email message that contains credit card numbers in the body will trigger this scan rule.

Refer to the exhibit which displays a list of IBE users on a FortiMail device. Which statement describes the pre-registered status of the IBE user extuser2@external.lab?

The user has received an IBE notification email, but has not accessed the HTTPS URL or attachment yet.

The user was registered by an administrator in anticipation of IBE participation.

The user account has been de-activated, and the user must register again the next time they receive an IBE email.

The user has completed the IBE registration process, but has not yet accessed their IBE email.

An organization has different groups of users with different needs in email functionality, such as address book access, mobile device access, email retention periods, and disk quotas.Which FortiMail feature specific to server mode can be used to accomplish this?

Address book management options

Refer to the exhibit, which shows a few lines of FortiMail logs. Based on these log entries, which two statements correctly describe the operational status of this FortiMail device? (Choose two.)

FortJMail is experiencing issues delivering the email to the internal.lab MTA.

The FortiMail device is in gateway or transparent mode.

FortJMail is experiencing issues delivering the email to the internal.lab MTA.

The FortiMail device is in sever mode.

The FortiMail device is in gateway or transparent mode.

FortiMail is experiencing issues accepting the connection from the external. lab MTA.

Refer to the exhibits which show a topology diagram (Topology) and a configuration element (Access Control Rule). Which three access control settings are recommended to allow outbound email from the example.com domain on FML-1? (Choose three.)

The Sender IP/netmask should be set to 10.29.1.45/32.

The Action should be set to Relay.

The Sender pattern should be set to *@example.com.

The Sender IP/netmask should be set to 10.29.1.45/32.

The Recipient pattern should be set to 10.29.1.45/24

The Action should be set to Relay.

The Sender pattern should be set to *@example.com.

The Enable check box should be cleared.

Refer to the exhibit which shows the Authentication Reputation list on a gateway mode FortiMail device. Why was the IP address blocked?

The IP address had consecutive SSH, SMTPS, and HTTPS login failures to FortiMail.

The IP address had consecutive SMTPS login failures to FortiMail.

The IP address had consecutive IMAP login failures to FortiMail.

The IP address had consecutive SSH, SMTPS, and HTTPS login failures to FortiMail.

The IP address had consecutive administrative password failures to FortiMai

Which statement about how impersonation analysis identifies spoofed email addresses is correct?

It uses DMARC validation to detect spoofed addresses.

It uses behavior analysis to detect spoofed addresses.

It uses DMARC validation to detect spoofed addresses.

It maps the display name to the correct recipient email address

It uses SPF validation to detect spoofed addresses.

Fortinet NSE6_FML-7.2 Practice Test 1 - Free Online Exam Prep & Questions

What are two disadvantages of configuring the dictionary and DLP scan rule aggressiveness too high? (Choose two.)

High aggressiveness scan settings do not support executable file types.

It is more resource intensive

More false positives could be detected.

FortiMail requires more disk space for the additional rules.

Comment (0)

Fortinet NSE6_FML-7.2 Practice Test 1

Question

Fortinet NSE6_FML-7.2 Practice Tests

Practice Tests