Fortinet NSE6_FWB-6.4 Exam Questions Instant Access

Question 1

The FortiWeb machine learning (ML) feature is a two-phase analysis mechanism.

Which two functions does the first layer perform? (Choose two.)

ADetermines whether an anomaly is a real attack or just a benign anomaly that should be ignored

BBuilds a threat model behind every parameter and HTTP method

CDetermines if a detected threat is a false-positive or not

DDetermines whether traffic is an anomaly, based on observed application traffic over time

Answer : B, D

The first layer uses the Hidden Markov Model (HMM) and monitors access to the application and collects data to build a mathematical model behind every parameter and HTTP method.

Question 2

Refer to the exhibits.

FortiWeb is configured in reverse proxy mode and it is deployed downstream to FortiGate. Based on the configuration shown in the exhibits, which of the following statements is true?

AFortiGate should forward web traffic to the server pool IP addresses.

BThe configuration is incorrect. FortiWeb should always be located upstream to FortiGate.

CYou must disable the Preserve Client IP setting on FotriGate for this configuration to work.

DFortiGate should forward web traffic to virtual server IP address.

Answer : D

Question 3

A client is trying to start a session from a page that should normally be accessible only after they have logged in.

When a start page rule detects the invalid session access, what can FortiWeb do? (Choose three.)

AReply with a ''403 Forbidden'' HTTP error

BAllow the page access, but log the violation

CAutomatically redirect the client to the login page

DDisplay an access policy message, then allow the client to continue, redirecting them to their requested page

EPrompt the client to authenticate

Answer : A, B, C

Question 4

You are deploying FortiWeb 6.4 in an Amazon Web Services cloud. Which 2 lines of this initial setup via CLI are incorrect? (Choose two.)

Answer : A, C

Question 5

What must you do with your FortiWeb logs to ensure PCI DSS compliance?

AStore in an off-site location

BErase them every two weeks

CEnable masking of sensitive data

DCompress them into a .zip file format

Answer : C

Question 6

Which of the following FortiWeb features is part of the mitigation tools against OWASP A4 threats?

ASensitive info masking

BPoison Cookie detection

CSession Management

DBrute Force blocking

Answer : C

Question 7

Which of the following is true about Local User Accounts?

AMust be assigned regardless of any other authentication

BCan be used for Single Sign On

CCan be used for site publishing

DBest suited for large environments with many users

Answer : C

Fortinet NSE 6 - FortiWeb 6.4 NSE6_FWB-6.4 Exam Questions