Exit demo NSE6_FWB-6.4 Fortinet NSE 6 - FortiWeb 6.4 PDF format · free preview

Fortinet NSE6_FWB-6.4 - Questions & Answers

Free preview · every answer includes a full explanation

Product page: https://prepkeys.com/nse6-fwb-64.html

Question 1
Single choice

What capability can FortiWeb add to your Web App that your Web App may or may not already have?

A.

Automatic backup and recovery

B.

High Availability

C.

HTTP/HTML Form Authentication

D.

SSL Inspection

Question 2
Single choice

Review the following configuration:

What is the expected result of this configuration setting?

A.

When machine learning (ML) is in its collecting phase, FortiWeb will accept an unlimited number of samples from the same source IP address.

B.

When machine learning (ML) is in its running phase, FortiWeb will accept an unlimited number of samples from the same source IP address.

C.

When machine learning (ML) is in its collecting phase, FortiWeb will not accept any samples from any source IP addresses.

D.

When machine learning (ML) is in its running phase, FortiWeb will accept a set number of samples from the same source IP address.

Question 3
Single choice

Which implementation is best suited for a deployment that must meet compliance criteria?

A.

SSL Inspection with FortiWeb in Transparency mode

B.

SSL Offloading with FortiWeb in reverse proxy mode

C.

SSL Inspection with FrotiWeb in Reverse Proxy mode

D.

SSL Offloading with FortiWeb in Transparency Mode

Question 4
Single choice

Which statement about local user accounts is true?

A.

They are best suited for large environments with many users.

B.

They cannot be used for site publishing.

C.

They must be assigned, regardless of any other authentication.

D.

They can be used for SSO.

Question 5
Single choice

How does an ADOM differ from a VDOM?

A.

ADOMs do not have virtual networking

B.

ADOMs improve performance by offloading some functions.

C.

ADOMs only affect specific functions, and do not provide full separation like VDOMs do.

D.

Allows you to have 1 administrator for multiple tenants

Question 6
Single choice

Which of the following FortiWeb features is part of the mitigation tools against OWASP A4 threats?

A.

Sensitive info masking

B.

Poison Cookie detection

C.

Session Management

D.

Brute Force blocking

Question 7
Single choice

When viewing the attack logs on FortiWeb, which client IP address is shown when you are using XFF header rules?

A.

FortiGate public IP

B.

FortiWeb IP

C.

FortiGate local IP

D.

Client real IP

Question 8
Multiple choice

Refer to the exhibit.

FortiWeb is configured to block traffic from Japan to your web application server. However, in the logs, the administrator is seeing traffic allowed from one particular IP address which is geo-located in Japan.

What can the administrator do to solve this problem? (Choose two.)

A.

Manually update the geo-location IP addresses for Japan.

B.

If the IP address is configured as a geo reputation exception, remove it.

C.

Configure the IP address as a blacklisted IP address.

D.

If the IP address is configured as an IP reputation exception, remove it.

Question 9
Single choice

An e-commerce web app is used by small businesses. Clients often access it from offices behind a router, where clients are on an IPv4 private network LAN. You need to protect the web application from denial of service attacks that use request floods.

What FortiWeb feature should you configure?

A.

Enable "Shared IP" and configure the separate rate limits for requests from NATted source IPs.

B.

Configure FortiWeb to use "X-Forwarded-For:" headers to find each client's private network IP, and to block attacks using that.

C.

Enable SYN cookies.

D.

Configure a server policy that matches requests from shared Internet connections.

Question 10
Single choice

Which would be a reason to implement HTTP rewriting?

A.

The original page has moved to a new URL

B.

To replace a vulnerable function in the requested URL

C.

To send the request to secure channel

D.

The original page has moved to a new IP address

Showing 10 of 56 questions · Unlock the full set