Fortinet NSE6_FWB-6.4 Exam Questions Instant Access

Question 1

Review the following configuration:

What is the expected result of this configuration setting?

AWhen machine learning (ML) is in its collecting phase, FortiWeb will accept an unlimited number of samples from the same source IP address.

BWhen machine learning (ML) is in its running phase, FortiWeb will accept an unlimited number of samples from the same source IP address.

CWhen machine learning (ML) is in its collecting phase, FortiWeb will not accept any samples from any source IP addresses.

DWhen machine learning (ML) is in its running phase, FortiWeb will accept a set number of samples from the same source IP address.

Answer : A

Question 2

You are configuring FortiAnalyzer to store logs from FortiWeb.

Which is true?

AFortiAnalyzer will store antivirus and DLP archives from FortiWeb.

BYou must enable ADOMs on FortiAnalyzer.

CTo store logs from FortiWeb 6.4, on FortiAnalyzer, you must select ''FrotiWeb 6.1''.

DFortiWeb will query FortiAnalyzer for reports, instead of generating them locally.

Answer : B

Question 3

An e-commerce web app is used by small businesses. Clients often access it from offices behind a router, where clients are on an IPv4 private network LAN. You need to protect the web application from denial of service attacks that use request floods.

What FortiWeb feature should you configure?

AEnable ''Shared IP'' and configure the separate rate limits for requests from NATted source IPs.

BConfigure FortiWeb to use ''X-Forwarded-For:'' headers to find each client's private network IP, and to block attacks using that.

CEnable SYN cookies.

DConfigure a server policy that matches requests from shared Internet connections.

Answer : C

Question 4

Which of the following FortiWeb features is part of the mitigation tools against OWASP A4 threats?

ASensitive info masking

BPoison Cookie detection

CSession Management

DBrute Force blocking

Answer : C

Question 5

Which of the following would be a reason for implementing rewrites?

APage has been moved to a new URL

BPage has been moved to a new IP address

CReplace vulnerable functions.

DSend connection to secure channel

Answer : C

Question 6

What role does FortiWeb play in ensuring PCI DSS compliance?

AIt provides the ability to securely process cash transactions.

BIt provides the required SQL server protection.

CIt provides the WAF required by PCI.

DIt provides credit card processing capabilities.

Answer : C

Question 7

You are deploying FortiWeb 6.4 in an Amazon Web Services cloud. Which 2 lines of this initial setup via CLI are incorrect? (Choose two.)

Answer : A, C

Fortinet NSE 6 - FortiWeb 6.4 NSE6_FWB-6.4 Exam Questions