[2022年11月28日] 更新されたNSE6_FML-6.4試験PDF問題集にはFast2test合格保証付き [Q29-Q52]

[2022年11月28日] 更新されたNSE6_FML-6.4試験PDF問題集にはFast2test合格保証付き

あなたを合格させるFortinet試験にはNSE6_FML-6.4試験問題集

質問 29
Refer to the exhibit.

It is recommended that you configure which three access receive settings to allow outbound email from the example.com domain on FML-1? (Choose three.)

A. The Sender pattern should be set to *@example.com
B. The Recipient pattern should be set to 10.29.1.45/24
C. The Sender IP/netmask should be set to 10.29.1.45/32
D. The Enable check box should be cleared
E. The Action should be set to Relay

正解: C,D,E

質問 30
A FortiMail administrator is concerned about cyber criminals attempting to get sensitive information from employees using whaling phishing attacks.
What option can the administrator configure to prevent these types of attacks?

A. Impersonation analysis
B. Bounce tag verification
C. Dictionary profile with predefined smart identifiers
D. Content disarm and reconstruction

正解: A

質問 31
An administrator sees that an excessive amount of storage space on a FortiMail device is being used up by quarantine accounts for invalid users. The FortiMail is operating in transparent mode.
Which two FortiMail features can the administrator configure to tackle this issue? (Choose two.)

A. Sender address rate control
B. Recipient address verification
C. Bounce address tag verification
D. Automatic removal of quarantine accounts

正解: A,D

質問 32
Which statement about how impersonation analysis identifies spoofed email addresses is correct?

A. It maps the display name to the correct recipient email address.
B. It uses DMARC validation to detect spoofed addresses.
C. It uses SPF validation to detect spoofed addresses.
D. It uses behavior analysis to detect spoofed addresses.

正解: D

質問 33
Which two antispam techniques query FortiGuard for rating information? (Choose two.)

A. IP reputation
B. DNSBL
C. SURBL
D. URI filter

正解: B,C

質問 34
Which two CLI commands, if executed, will erase all data on the log disk partition? (Choose two.)

A. execute formatmaildisk
B. execute partitionlogdisk 40
C. execute formatlogdisk
D. execute formatmaildisk_backup

正解: B,C

質問 35
Examine the FortiMail user webmail interface shown in the exhibit; then answer the question below.

Which one of the following statements is true regarding this server mode FortiMail's configuration?

A. This user's account has a customized access profile applied that allows access to the personal address book
B. The administrator has not made any changes to the default address book access privileges
C. The administrator has configured an inbound recipient policy with a customized resource profile
D. The protected domain-level service settings have been modified to allow access to the domain address book

正解: C

解説:
domain address book can be enabled under resource profile which is applied to inbound recipient policy

質問 36
A FortiMail administrator is investigating a sudden increase in DSNs being delivered to the protected domain for undeliverable email messages. After searching the logs, the administrator identifies that the DSNs were not generated as a result of any outbound email sent from the protected domain.
Which FortiMail antispam technique can the administrator use to prevent this scenario?

A. Bounce address tag validation
B. Spoofed header detection
C. Spam outbreak protection
D. FortiGuard IP Reputation

正解: C

質問 37
Examine the FortiMail active-passive cluster shown in the exhibit; then answer the question below.

Which of the following parameters are recommended for the Primary FortiMail's HA interface configuration? (Choose three.)

A. Virtual IP address: 172.16.32.55/24
B. Peer IP address: 172.16.32.57
C. Enable port monitor: disable
D. Heartbeat status: Primary
E. Virtual IP action: Use

正解: A,D,E

質問 38
Refer to the exhibit.

What IP address should the DNS MX record for this deployment resolve to?

A. 172.16.32.57
B. 172.16.32.56
C. 172.16.32.1
D. 172.16.32.55

正解: D

質問 39
Refer to the exhibit.

Which two statements about how the transparent mode FortiMail device routes email for the example.com domain are true? (Choose two.)

A. FML-1 will use the built-in MTA for outgoing sessions
B. FML-1 will use the transparent proxy for incoming sessions
C. If outgoing email messages are undeliverable, FM-1 can queue them to retry later
D. If incoming email messages are undeliverable, FML-1 can queue them to retry later

正解: B,C

質問 40
Examine the FortiMail antivirus action profile shown in the exhibit; then answer the question below.

What is the expected outcome if FortiMail applies this action profile to an email? (Choose two.)

A. The sanitized email will be sent to the recipient's personal quarantine
B. A replacement message will be added to the email
C. The administrator will be notified of the virus detection
D. Virus content will be removed from the email

正解: B,D

質問 41
Refer to the exhibit.

The exhibit shows a FortiMail active-passive setup.
Which three actions are recommended when configuring the primary FortiMail HA interface? (Choose three.)

A. In the Peer IP address field, type 172.16.32.57
B. In the Virtual IP action drop-down list, select Use
C. In the Heartbeat status drop-down list, select Primary
D. Disable Enable port monitor
E. In the Virtual IP address field, type 172.16.32.55/24

正解: B,C,D

質問 42
While testing outbound MTA functionality, an administrator discovers that all outbound email is being processed using policy IDs 1:2:0.
Which two reasons explain why the last policy ID value is 0? (Choose two.)

A. Outbound email is being rejected
B. IP policy ID 2 has the exclusive flag set
C. There are no outgoing recipient policies configured
D. There are no access delivery rules configured for outbound email

正解: C,D

質問 43
Refer to the exhibit.

Which statement describes the impact of setting the User inactivity expiry time option to 90 days?

A. First time IBE users must register to access their email within 90 days of receiving the notification email message
B. IBE user accounts will expire after 90 days of inactivity, and must register again to access new IBE email message
C. After initial registration, IBE users can access the secure portal without authenticating again for 90 days
D. Registered IBE users have 90 days from the time they receive a notification email message to access their IBE email

正解: B

質問 44
Examine the FortiMail DLP scan rule shown in the exhibit; then answer the question below.

Which of the following statements is true regarding this configuration? (Choose two.)

A. An email must contain credit card numbers in the body, attachment, and subject to trigger this scan rule
B. An email message containing credit card numbers in the body will trigger this scan rule
C. An email message containing the words "Credit Card" in the subject will trigger this scan rule
D. If an email is sent from [email protected] the action will be applied without matching any conditions

正解: B,C

質問 45
Refer to the exhibit.

Which two statements about email messages sent from User A to User B are correct? (Choose two.)

A. User B will retrieve the email message using either POP3 or IMAP.
B. User A's MUA will perform a DNS MX record lookup to send the email message.
C. mx.example1.org will forward the email message to the MX record that has the lowest preference.
D. The DNS server will act as an intermediary MTA.

正解: B,D

質問 46
While reviewing logs, an administrator discovers that an incoming email was processed using policy IDs 0:4:9.
Which two scenarios will generate this policy ID? (Choose two.)

A. FortiMail applies the default behavior for relaying inbound email
B. FortiMail configuration is missing an access delivery rule
C. Incoming recipient policy ID 9 has the exclusive flag set
D. Email was processed using IP policy ID 4

正解: A,B

質問 47
Refer to the exhibit.

Which two statements about the mail server settings are true? (Choose two.)

A. FortiMail will drop any inbound plaintext SMTP connection
B. FortiMail will support the STARTTLS extension
C. FortiMail will enforce SMTPS on all outbound sessions
D. FortiMail will accept SMTPS connections

正解: A,D

質問 48
Which FortiMail option removes embedded code components in Microsoft Word, while maintaining the original file format?

A. Behavior analysis
B. Impersonation analysis
C. Content disarm and reconstruction
D. Header analysis

正解: C

質問 49
Refer to the exhibit.

Which configuration change must you make to block an offending IP address temporarily?

A. Add the offending IP address to the domain block list
B. Add the offending IP address to the user block list
C. Change the authentication reputation setting status to Enable
D. Add the offending IP address to the system block list

正解: C

質問 50
Refer to the exhibit.

MTA-1 is delivering an email intended for User 1 to MTA-2.
Which two statements about protocol usage between the devices are true? (Choose two.)