Fortinet NSE 6 - FortiWeb 6.4 - NSE6_FWB-6.4 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

An e-commerce web app is used by small businesses. Clients often access it from offices behind a router, where clients are on an IPv4 private network LAN. You need to protect the web application from denial of service attacks that use request floods.
What FortiWeb feature should you configure?

A. Configure FortiWeb to use "X-Forwarded-For:" headers to find each client's private network IP, and to block attacks using that. B. Configure a server policy that matches requests from shared Internet connections. C. Enable "Shared IP" and configure the separate rate limits for requests from NATted source IPs. D. Enable SYN cookies.

Discussion 0

Correct Answer: D Vote an answer

Question 2

When generating a protection configuration from an auto learning report what critical step must you do before generating the final protection configuration?

A. Activate the report to create t profile B. Take the FortiWeb offline to apply the profile C. Drill down in the report to correct any false positives. D. Restart the FortiWeb to clear the caches

Discussion 0

Correct Answer: C Vote an answer

Question 3

Which is true about HTTPS on FortiWeb? (Choose three.)

A. After enabling HSTS, redirects to HTTPS are no longer necessary. B. For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy. C. Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2. D. In true transparent mode, the TLS session terminator is a protected web server. E. In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.

Discussion 0

Correct Answer: B,D,E Vote an answer

Question 4

Which operation mode does not require additional configuration in order to allow FTP traffic to your web server?

A. Offline Protection B. Reverse-Proxy C. Transparent Inspection D. True Transparent Proxy

Discussion 0

Correct Answer: C Vote an answer

Question 5

You've configured an authentication rule with delegation enabled on FortiWeb.
What happens when a user tries to access the web application?

A. FrotiWeb redirects users to a FortiAuthenticator page, then if the user authenticates successfully, FortiGate signals to FortiWeb to allow access to the web app B. ForitWeb redirects the user to the web app's authentication page C. FortiWeb replies with a HTTP challenge of behalf of the server, the if the user authenticates successfully, FortiWeb allows the request and also includes credentials in the request that it forwards to the web app D. FortiWeb forwards the HTTP challenge from the server to the client, then monitors the reply, allowing access if the user authenticates successfully

Discussion 0

Correct Answer: A Vote an answer

Question 6

A client is trying to start a session from a page that should normally be accessible only after they have logged in.
When a start page rule detects the invalid session access, what can FortiWeb do? (Choose three.)

A. Reply with a "403 Forbidden" HTTP error B. Automatically redirect the client to the login page C. Allow the page access, but log the violation D. Display an access policy message, then allow the client to continue, redirecting them to their requested page E. Prompt the client to authenticate

Discussion 0

Correct Answer: A,B,C Vote an answer