FortiMail 5.3.8 Specialist

Here you have the best Fortinet NSE6_FML-5.3.8 practice exam questions

  • You have 30 total questions to study from
  • Each page has 5 questions, making a total of 6 pages
  • You can navigate through the pages using the buttons at the bottom
  • This questions were last updated on October 25, 2025
  • This site is not affiliated with or endorsed by Fortinet.
Question 1 of 30
Examine the FortiMail session profile and protected domain configuration shown in the exhibit; then answer the question below.
Exam NSE6_FML-5.3.8: Question 1 - Image 1
Exam NSE6_FML-5.3.8: Question 1 - Image 2
Which size limit will FortiMail apply to outbound email?
    Correct Answer: B

    The size limit that FortiMail will apply to outbound email is determined by the session profile. The session profile in this configuration restricts the message size to 51200 KB. Although the domain configuration shows a higher limit, the session profile settings take precedence for SMTP limits. Therefore, the correct size limit for outbound emails is 51200 KB.

Question 2 of 30
Examine the FortiMail antivirus action profile shown in the exhibit; then answer the question below.
Exam NSE6_FML-5.3.8: Question 2 - Image 1
What is the expected outcome if FortiMail applies this action profile to an email? (Choose two.)
    Correct Answer: B, C

    The expected outcome when FortiMail applies this action profile to an email is that a replacement message will be added to the email and virus content will be removed from the email. The profile indicates options for handling infected or suspicious content, including replacing the message, thus adding a replacement message, and removing virus content, making B and C the correct choices.

Question 3 of 30
Examine the FortiMail recipient-based policy shown in the exhibit; then answer the question below.
Exam NSE6_FML-5.3.8: Question 3 - Image 1
After creating the policy, an administrator discovered that clients are able to send unauthenticated email using SMTP. What must be done to ensure clients cannot send unauthenticated email?
    Correct Answer: C

    To ensure clients cannot send unauthenticated emails, configuring an access receive rule to verify authentication status is necessary. This rule will enforce checks at the point of email reception to confirm that the sending client is authenticated, effectively preventing unauthenticated emails from being sent via SMTP.

Question 4 of 30
FortiMail is configured with the protected domain "example.com". Identify which of the following envelope addresses will require an access receive rule to relay for unauthenticated senders? (Choose two.)
    Correct Answer: B, C

    FortiMail processes emails based on the domain configurations and authentication rules in place. In this scenario, the protected domain is example.com. For unauthenticated senders, the system needs to determine whether to relay emails or not based on an access receive rule. FortiMail will relay emails for the protected domain automatically but requires rules for external domains to avoid open relay situations. In options B and C, the MAIL FROM addresses are not from example.com, while the RCPT TO addresses are from external domains or the protected domain. Therefore, unauthenticated senders for these scenarios would require specific access rules to relay those emails.

Question 5 of 30
Examine the nslookup output shown in the exhibit; then answer the question below.
Exam NSE6_FML-5.3.8: Question 5 - Image 1
Identify which of the following statements is true regarding the example.com domain's MTAs. (Choose two.)
    Correct Answer: A, B

    The output shows two mail exchange (MX) records for the example.com domain with different preference values. The MX record with the lower preference value (mx.hosted.com with a preference of 10) is prioritized higher. This means external MTAs will send email to mx.hosted.com first, and only if it is unreachable, they will then send emails to mx.example.com which has a higher preference value of 20. Therefore, the primary MTA for the example.com domain is mx.hosted.com, and if it becomes unreachable, then mx.example.com is used. Load balancing is not applicable here as it applies to servers with equal preference values.