Fortinet Certification NSE6_FWB-6.0 Real Exam Questions and Answers FREE Updated on Oct 21, 2021
NSE6_FWB-6.0 Ultimate Study Guide - VCEDumps
NEW QUESTION 15
Which of the following FortiWeb features is part of the mitigation tools against OWASP A4 threats?
- A. Session Management
- B. Sensitive info masking
- C. Poison Cookie detection
- D. Brute Force blocking
Answer: A
NEW QUESTION 16
When integrating FortiWeb and FortiAnalyzer, why is the selection for FortiWebVersion critical? (Choose two)
- A. Defines communication protocol
- B. Defines Log storage location
- C. Defines Database Schema
- D. Defines Log file format
Answer: B,D
NEW QUESTION 17
What role does FortiWeb play in ensuring PCI DSScompliance?
- A. Provide ability to securely process cash transactions
- B. Provides credit card processing capabilities
- C. PCI specifically requires a WAF
- D. Provides load balancing between multiple web servers
Answer: B
NEW QUESTION 18
When generating a protection configuration from an auto learning report what critical step must you dobefore generating the final protection configuration?
- A. Drill down in the report to correct any false positives.
- B. Take the FortiWeb offline to apply the profile
- C. Restart the FortiWeb to clear the caches
- D. Activate the report to create t profile
Answer: A
NEW QUESTION 19
A client is trying tostart a session from a page that should normally be accessible only after they have logged in.
When a start page rule detects the invalid session access, what can FortiWeb do? (Choose three.)
- A. Allow the page access, but log the violation
- B. Automatically redirect the client to the login page
- C. Prompt the client to authenticate
- D. Display an access policy message, then allow the client to continue, redirecting them to their requested page
- E. Reply with a "403 Forbidden" HTTP error
Answer: A,B,E
NEW QUESTION 20
What benefit does Auto Learning provide?
- A. Automatically builds rules sets
- B. FortiWeb scans all traffic without taking action and makes recommendations on rules
- C. Automatically blocks all detected threats
- D. Automatically identifies and blocks suspicious IPs
Answer: A
NEW QUESTION 21
When viewing the attack logs on your FortiWeb, which IP Address is shown for the client when using XFF Header rules?
- A. Client's real IP
- B. FortiGate's local IP
- C. FortiWeb's IP
- D. FortiGate's public IP
Answer: A
NEW QUESTION 22
In which operation mode(s) can FortiWeb modify HTTP packets? (Choose two.)
- A. Transparent Inspection
- B. Reverse proxy
- C. Offlineprotection
- D. True transparent proxy
Answer: B
NEW QUESTION 23
Reverse-proxy mode is best suited for use in which type of environment?
- A. Flexible environments where you can easily change the IP addressing scheme
- B. Small Office/Home Office environments
- C. New networks where infrastructure is not yet defined
- D. Environments where you cannot change your IP addressing scheme
Answer: D
NEW QUESTION 24
When theFortiWeb is configured in Reverse Proxy mode and the FortiGate is configured as an SNAT device, what IP address will the FortiGate's Real Server configuration point at?
- A. Server's real IP
- B. FortiWeb's real IP
- C. IPAddress of the Virtual Server on the FortiWeb
- D. Virtual Server IP on the FortiGate
Answer: D
NEW QUESTION 25
Which is true about HTTPS on FortiWeb? (Choose three.)
- A. In true transparent mode, the TLS session terminator is a protected web server.
- B. In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.
- C. Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.
- D. After enabling HSTS, redirects to HTTPS are no longer necessary.
- E. For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.
Answer: A,B,E
NEW QUESTION 26
How does your FortiWeb configuration differ if the FortiWeb is upstream of the SNAT device instead of downstream of the SNAT device?
- A. You must enable "Add" X-Forwarded-For: instead of the "Use" X-Forwarded-For: option.
- B. No special configuration required
- C. FortiWeb must be set for Transparent Mode
- D. You must enable the "Use" X-Forwarded-For: option.
Answer: D
NEW QUESTION 27
......
Ultimate Guide to Prepare NSE6_FWB-6.0 Certification Exam for Fortinet Certification: https://www.vcedumps.com/NSE6_FWB-6.0-examcollection.html
