[Q25-Q43] Exam Questions and Answers for NSE6_FWB-6.4 Study Guide Questions and Answers!

Rate this post

Exam Questions and Answers for NSE6_FWB-6.4 Study Guide Questions and Answers!

Fortinet NSE 6 – FortiWeb 6.4 Certification Sample Questions and Practice Exam

NEW QUESTION 25
When viewing the attack logs on FortiWeb, which client IP address is shown when you are using XFF header rules?

FortiGate public IP

FortiWeb IP

FortiGate local IP

Client real IP

Explanation
When an XFF header reaches Alteon from a client, Alteon removes all the content from the header and injects the client IP address. Alteon then forwards the header to the server.

NEW QUESTION 26
Refer to the exhibit.

FortiWeb is configured to block traffic from Japan to your web application server. However, in the logs, the administrator is seeing traffic allowed from one particular IP address which is geo-located in Japan.
What can the administrator do to solve this problem? (Choose two.)

Manually update the geo-location IP addresses for Japan.

If the IP address is configured as a geo reputation exception, remove it.

Configure the IP address as a blacklisted IP address.

If the IP address is configured as an IP reputation exception, remove it.

NEW QUESTION 27
What can an administrator do if a client has been incorrectly period blocked?

Nothing, it is not possible to override a period block.

Manually release the ID address from the temporary blacklist.

Force a new IP address to the client.

Disconnect the client from the network.

Explanation
Block Period
Enter the number of seconds that you want to block the requests. The valid range is 1-3,600 seconds. The default value is 60 seconds.
This option only takes effect when you choose Period Block in Action.
Note: That’s a temporary blacklist so you can manually release them from the blacklist.

NEW QUESTION 28
When generating a protection configuration from an auto learning report what critical step must you do before generating the final protection configuration?

Restart the FortiWeb to clear the caches

Drill down in the report to correct any false positives.

Activate the report to create t profile

Take the FortiWeb offline to apply the profile

NEW QUESTION 29
Which two statements about the anti-defacement feature on FortiWeb are true? (Choose two.)

Anti-defacement can redirect users to a backup web server, if it detects a change.

Anti-defacement downloads a copy of your website to RAM, in order to restore a clean image, if it detects defacement.

FortiWeb will only check to see if there are changes on the web server; it will not download the whole file each time.

Anti-defacement does not make a backup copy of your databases.

Explanation
Anti-defacement backs up web pages only, not databases.
If it detects any file changes, the FortiWeb appliance will download a new backup revision.

NEW QUESTION 30
In which scenario might you want to use the compression feature on FortiWeb?

When you are serving many corporate road warriors using 4G tablets and phones

When you are offering a music streaming service

When you want to reduce buffering of video streams

Never, since most traffic today is already highly compressed

Explanation
https://training.fortinet.com/course/view.php?id=3363
When might you want to use the compression feature on FortiWeb? When you are serving many road warriors who are using 4G tablets and phones

NEW QUESTION 31
You are using HTTP content routing on FortiWeb. Requests for web app A should be forwarded to a cluster of web servers which all host the same web app. Requests for web app B should be forwarded to a different, single web server.
Which is true about the solution?

Static or policy-based routes are not required.

To achieve HTTP content routing, you must chain policies: the first policy accepts all traffic, and forwards requests for web app A to the virtual server for policy A. It also forwards requests for web app B to the virtual server for policy B. Policy A and Policy B apply their app-specific protection profiles, and then distribute that app’s traffic among all members of the server farm.

You must put the single web server into a server pool in order to use it with HTTP content routing.

The server policy applies the same protection profile to all its protected web apps.

NEW QUESTION 32
A client is trying to start a session from a page that would normally be accessible only after the client has logged in.
When a start page rule detects the invalid session access, what can FortiWeb do? (Choose three.)

Display an access policy message, then allow the client to continue

Redirect the client to the login page

Allow the page access, but log the violation

Prompt the client to authenticate

Reply with a 403 Forbidden HTTP error

NEW QUESTION 33
In Reverse proxy mode, how does FortiWeb handle traffic that does not match any defined policies?

Non-matching traffic is allowed

non-Matching traffic is held in buffer

Non-matching traffic is Denied

Non-matching traffic is rerouted to FortiGate

NEW QUESTION 34
You are configuring FortiAnalyzer to store logs from FortiWeb.
Which is true?

FortiAnalyzer will store antivirus and DLP archives from FortiWeb.

You must enable ADOMs on FortiAnalyzer.

To store logs from FortiWeb 6.4, on FortiAnalyzer, you must select “FrotiWeb 6.1”.

FortiWeb will query FortiAnalyzer for reports, instead of generating them locally.

NEW QUESTION 35
Which statement about local user accounts is true?

They are best suited for large environments with many users.

They cannot be used for site publishing.

They must be assigned, regardless of any other authentication.

They can be used for SSO.

NEW QUESTION 36
What capability can FortiWeb add to your Web App that your Web App may or may not already have?

Automatic backup and recovery

High Availability

HTTP/HTML Form Authentication

SSL Inspection

NEW QUESTION 37
Refer to the exhibit.

Many legitimate users are being identified as bots. FortiWeb bot detection has been configured with the settings shown in the exhibit. The FortiWeb administrator has already verified that the current model is accurate.
What can the administrator do to fix this problem, making sure that real bots are not allowed through FortiWeb?

Change Model Type to Strict

Change Action under Action Settings to Alert

Disable Dynamically Update Model

Enable Bot Confirmation

Explanation
Bot Confirmation
If the number of anomalies from a user has reached the Anomaly Count, the system executes Bot Confirmation before taking actions.
The Bot Confirmation is to confirm if the user is indeed a bot. The system sends RBE (Real Browser Enforcement) JavaScript or CAPTCHA to the client to double check if it’s a real bot.

NEW QUESTION 38
What other consideration must you take into account when configuring Defacement protection

Use FortiWeb to block SQL Injections and keep regular backups of the Database

Also incorporate a FortiADC into your network

None. FortiWeb completely secures the site against defacement attacks

Configure the FortiGate to perform Anti-Defacement as well

NEW QUESTION 39
In which operation mode(s) can FortiWeb modify HTTP packets? (Choose two.)

Transparent Inspection

Offline protection

True transparent proxy

Reverse proxy

NEW QUESTION 40
FortiWeb offers the same load balancing algorithms as FortiGate.
Which two Layer 7 switch methods does FortiWeb also offer? (Choose two.)

Round robin

HTTP session-based round robin

HTTP user-based round robin

HTTP content routes

NEW QUESTION 41
How does your FortiWeb configuration differ if the FortiWeb is upstream of the SNAT device instead of downstream of the SNAT device?

You must enable the “Use” X-Forwarded-For: option.

FortiWeb must be set for Transparent Mode

No special configuration required

You must enable “Add” X-Forwarded-For: instead of the “Use” X-Forwarded-For: option.

NEW QUESTION 42
What role does FortiWeb play in ensuring PCI DSS compliance?

It provides the ability to securely process cash transactions.

It provides the required SQL server protection.

It provides the WAF required by PCI.

It provides credit card processing capabilities.

NEW QUESTION 43
Which
regex expression is the correct format for redirecting the URL http://www.example.com?

www.example.com

wwwexamplecom

www/.example/.com

Explanation
\1://www.company.com/\2/\3

Loading …

Fortinet NSE6_FWB-6.4 Exam Syllabus Topics:

Topic	Details
Topic 1	Configure machine learning and bot detection Configure SSL inspection and offloading
Topic 2	Configure API protection and bot mitigation Configure caching and compression
Topic 3	Configure server pools, policies, and protected hostnames Trobleshoot encryption and authentication related issues
Topic 4	Configure various access control and tracking methods Troubleshoot deployment and system related issues
Topic 5	Encryption, Authentication, and Compliance Mitigate web application vulnerabilities
Topic 6	Troubleshoot threat detection and mitigation related issues Identify FortiWeb deployment requirements
Topic 7	Troublehsoot application delivery related issues Configure various threat mitigation features

NSE6_FWB-6.4 certification dumps – NSE 6 Network Security Specialist NSE6_FWB-6.4 guides – 100% valid: https://www.real4exams.com/NSE6_FWB-6.4_braindumps.html

[Q25-Q43] Exam Questions and Answers for NSE6_FWB-6.4 Study Guide Questions and Answers!

Fortinet NSE6_FWB-6.4 Exam Syllabus Topics:

Leave a Reply Cancel reply