Fortinet NSE6_FWB-6.4 Exam Questions Instant Access

Question 1

When generating a protection configuration from an auto learning report what critical step must you do before generating the final protection configuration?

ARestart the FortiWeb to clear the caches

BDrill down in the report to correct any false positives.

CActivate the report to create t profile

DTake the FortiWeb offline to apply the profile

Answer : B

Question 2

Which is true about HTTPS on FortiWeb? (Choose three.)

AFor SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.

BAfter enabling HSTS, redirects to HTTPS are no longer necessary.

CIn true transparent mode, the TLS session terminator is a protected web server.

DEnabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.

EIn transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.

Answer : A, C, E

Question 3

Under what circumstances would you want to use the temporary uncompress feature of FortiWeb?

AIn the case of compression being done on the FortiWeb, to inspect the content of the compressed file

BIn the case of the file being a .MP3 music file

CIn the case of compression being done on the web server, to inspect the content of the compressed file.

DIn the case of the file being an .MP4 video

Answer : C

Question 4

What can an administrator do if a client has been incorrectly period blocked?

ANothing, it is not possible to override a period block.

BManually release the ID address from the temporary blacklist.

CForce a new IP address to the client.

DDisconnect the client from the network.

Answer : B

Block Period

Enter the number of seconds that you want to block the requests. The valid range is 1--3,600 seconds. The default value is 60 seconds.

This option only takes effect when you choosePeriod BlockinAction.

Note: That's a temporary blacklist so you can manually release them from the blacklist.

Question 5

How does an ADOM differ from a VDOM?

AADOMs do not have virtual networking

BADOMs improve performance by offloading some functions.

CADOMs only affect specific functions, and do not provide full separation like VDOMs do.

DAllows you to have 1 administrator for multiple tenants

Answer : A

Question 6

What capability can FortiWeb add to your Web App that your Web App may or may not already have?

AAutomatic backup and recovery

BHigh Availability

CHTTP/HTML Form Authentication

DSSL Inspection

Answer : C

Question 7

Which two statements about the anti-defacement feature on FortiWeb are true? (Choose two.)

AAnti-defacement can redirect users to a backup web server, if it detects a change.

BAnti-defacement downloads a copy of your website to RAM, in order to restore a clean image, if it detects defacement.

CFortiWeb will only check to see if there are changes on the web server; it will not download the whole file each time.

DAnti-defacement does not make a backup copy of your databases.

Answer : C, D

Anti-defacement backs up web pages only,notdatabases.

If it detects any file changes, theFortiWebappliance will download a new backup revision.

Fortinet NSE 6 - FortiWeb 6.4 NSE6_FWB-6.4 Exam Questions