Fortinet NSE6_FWB-6.4 Exam Questions Instant Access

Question 1

Which of the following would be a reason for implementing rewrites?

APage has been moved to a new URL

BPage has been moved to a new IP address

CReplace vulnerable functions.

DSend connection to secure channel

Answer : C

Question 2

When is it possible to use a self-signed certificate, rather than one purchased from a commercial certificate authority?

AIf you are a small business or home office

BIf you are an enterprise whose employees use only mobile devices

CIf you are an enterprise whose resources do not need security

DIf you are an enterprise whose computers all trust your active directory or other CA server

Answer : D

Question 3

FortiWeb offers the same load balancing algorithms as FortiGate.

Which two Layer 7 switch methods does FortiWeb also offer? (Choose two.)

ARound robin

BHTTP session-based round robin

CHTTP user-based round robin

DHTTP content routes

Answer : A, D

http://fortinet.globalgate.com.ar/pdfs/FortiWeb/FortiWeb_DS.pdf

Question 4

What key factor must be considered when setting brute force rate limiting and blocking?

AA single client contacting multiple resources

BMultiple clients sharing a single Internet connection

CMultiple clients from geographically diverse locations

DMultiple clients connecting to multiple resources

Answer : B

https://training.fortinet.com/course/view.php?id=3363 What is one key factor that you must consider when setting brute force rate limiting and blocking? Multiple clients sharing a single Internet connection

Question 5

In which operation mode(s) can FortiWeb modify HTTP packets? (Choose two.)

ATransparent Inspection

BOffline protection

CTrue transparent proxy

DReverse proxy

Answer : C, D

Question 6

A client is trying to start a session from a page that should normally be accessible only after they have logged in.

When a start page rule detects the invalid session access, what can FortiWeb do? (Choose three.)

AReply with a ''403 Forbidden'' HTTP error

BAllow the page access, but log the violation

CAutomatically redirect the client to the login page

DDisplay an access policy message, then allow the client to continue, redirecting them to their requested page

EPrompt the client to authenticate

Answer : A, B, C

Question 7

When viewing the attack logs on FortiWeb, which client IP address is shown when you are using XFF header rules?

AFortiGate public IP

BFortiWeb IP

CFortiGate local IP

DClient real IP

Answer : D

When an XFF header reaches Alteon from a client, Alteon removes all the content from the header and injects the client IP address. Alteon then forwards the header to the server.

Fortinet NSE 6 - FortiWeb 6.4 NSE6_FWB-6.4 Exam Questions