Fortinet NSE6_FWB-6.4 Exam Questions Instant Access

Question 1

What role does FortiWeb play in ensuring PCI DSS compliance?

APCI specifically requires a WAF

BProvides credit card processing capabilities

CProvide ability to securely process cash transactions

DProvides load balancing between multiple web servers

Answer : A

FortiWeb helps you meet all PCI requirements, but PCI now specifically recommends using a WAF, and developing remediations against the top 10 vulnerabilities, according to OWASP.

Question 2

What key factor must be considered when setting brute force rate limiting and blocking?

AA single client contacting multiple resources

BMultiple clients sharing a single Internet connection

CMultiple clients from geographically diverse locations

DMultiple clients connecting to multiple resources

Answer : B

https://training.fortinet.com/course/view.php?id=3363 What is one key factor that you must consider when setting brute force rate limiting and blocking? Multiple clients sharing a single Internet connection

Question 3

What can an administrator do if a client has been incorrectly period blocked?

ANothing, it is not possible to override a period block.

BManually release the ID address from the temporary blacklist.

CForce a new IP address to the client.

DDisconnect the client from the network.

Answer : B

Block Period

Enter the number of seconds that you want to block the requests. The valid range is 1--3,600 seconds. The default value is 60 seconds.

This option only takes effect when you choosePeriod BlockinAction.

Note: That's a temporary blacklist so you can manually release them from the blacklist.

Question 4

How does your FortiWeb configuration differ if the FortiWeb is upstream of the SNAT device instead of downstream of the SNAT device?

AYou must enable the ''Use'' X-Forwarded-For: option.

BFortiWeb must be set for Transparent Mode

CNo special configuration required

DYou must enable ''Add'' X-Forwarded-For: instead of the ''Use'' X-Forwarded-For: option.

Answer : D

Question 5

You are using HTTP content routing on FortiWeb. You want requests for web application A to be forwarded to a cluster of web servers, which all host the same web application. You want requests for web application B to be forwarded to a different, single web server.

Which statement about this solution is true?

AThe server policy applies the same protection profile to all of its protected web applications.

BYou must put the single web server in to a server pool, in order to use it with HTTP content routing.

CYou must chain policies so that requests for web application A go to the virtual server for policy A, and requests for web application B go to the virtual server for policy B.

DStatic or policy-based routes are not required.

Answer : D

Question 6

What role does FortiWeb play in ensuring PCI DSS compliance?

AIt provides the ability to securely process cash transactions.

BIt provides the required SQL server protection.

CIt provides the WAF required by PCI.

DIt provides credit card processing capabilities.

Answer : C

Question 7

In which scenario might you want to use the compression feature on FortiWeb?

AWhen you are serving many corporate road warriors using 4G tablets and phones

BWhen you are offering a music streaming service

CWhen you want to reduce buffering of video streams

DNever, since most traffic today is already highly compressed

Answer : A

https://training.fortinet.com/course/view.php?id=3363

When might you want to use the compression feature on FortiWeb? When you are serving many road warriors who are using 4G tablets and phones

Fortinet NSE 6 - FortiWeb 6.4 NSE6_FWB-6.4 Exam Questions