How does offloading compression to FortiWeb benefit your network?

Free up resources on the web server

free up resources on the database server

Free up resources on the web server

reduces file size on the client's storage

free up resources on the FortiGate

When the FortiWeb is configured in Reverse Proxy mode and the FortiGate is configured as an SNAT device, what IP address will the FortiGate's Real Server configuration point at?

Virtual Server IP on the FortiGate

IP Address of the Virtual Server on the FortiWeb

How does your FortiWeb configuration differ if the FortiWeb is upstream of the SNAT device instead of downstream of the SNAT device?

You must enable ''Add'' X-Forwarded-For: instead of the ''Use'' X-Forwarded-For: option.

You must enable the ''Use'' X-Forwarded-For: option.

FortiWeb must be set for Transparent Mode

No special configuration required

You must enable ''Add'' X-Forwarded-For: instead of the ''Use'' X-Forwarded-For: option.

You are using HTTP content routing on FortiWeb. Requests for web app A should be forwarded to a cluster of web servers which all host the same web app. Requests for web app B should be forwarded to a different, single web server.Which is true about the solution?

To achieve HTTP content routing, you must chain policies: the first policy accepts all traffic, and forwards requests for web app A to the virtual server for policy A. It also forwards requests for web app B to the virtual server for policy B. Policy A and Policy B apply their app-specific protection profiles, and then distribute that app's traffic among all members of the server farm.

Static or policy-based routes are not required.

To achieve HTTP content routing, you must chain policies: the first policy accepts all traffic, and forwards requests for web app A to the virtual server for policy A. It also forwards requests for web app B to the virtual server for policy B. Policy A and Policy B apply their app-specific protection profiles, and then distribute that app's traffic among all members of the server farm.

You must put the single web server into a server pool in order to use it with HTTP content routing.

The server policy applies the same protection profile to all its protected web apps.

In Reverse proxy mode, how does FortiWeb handle traffic that does not match any defined policies?

Non-matching traffic is allowed

non-Matching traffic is held in buffer

Non-matching traffic is rerouted to FortiGate

You've configured an authentication rule with delegation enabled on FortiWeb.What happens when a user tries to access the web application?

FrotiWeb redirects users to a FortiAuthenticator page, then if the user authenticates successfully, FortiGate signals to FortiWeb to allow access to the web app

ForitWeb redirects the user to the web app's authentication page

FortiWeb forwards the HTTP challenge from the server to the client, then monitors the reply, allowing access if the user authenticates successfully

FortiWeb replies with a HTTP challenge of behalf of the server, the if the user authenticates successfully, FortiWeb allows the request and also includes credentials in the request that it forwards to the web app

An e-commerce web app is used by small businesses. Clients often access it from offices behind a router, where clients are on an IPv4 private network LAN. You need to protect the web application from denial of service attacks that use request floods.What FortiWeb feature should you configure?

Enable ''Shared IP'' and configure the separate rate limits for requests from NATted source IPs.

Configure FortiWeb to use ''X-Forwarded-For:'' headers to find each client's private network IP, and to block attacks using that.

Configure a server policy that matches requests from shared Internet connections.

Under which circumstances does FortiWeb use its own certificates? (Choose Two)

Secondary HTTPS connection to server where FortiWeb acts as a client

What benefit does Auto Learning provide?

Automatically builds rules sets

Automatically identifies and blocks suspicious IPs

FortiWeb scans all traffic without taking action and makes recommendations on rules

Automatically builds rules sets

Automatically blocks all detected threats

You are configuring FortiAnalyzer to store logs from FortiWeb.Which is true?

You must enable ADOMs on FortiAnalyzer.

FortiAnalyzer will store antivirus and DLP archives from FortiWeb.

You must enable ADOMs on FortiAnalyzer.

To store logs from FortiWeb 6.4, on FortiAnalyzer, you must select ''FrotiWeb 6.1''.

FortiWeb will query FortiAnalyzer for reports, instead of generating them locally.

Which of the following would be a reason for implementing rewrites?

Page has been moved to a new URL

Page has been moved to a new IP address

Send connection to secure channel

A client is trying to start a session from a page that should normally be accessible only after they have logged in.When a start page rule detects the invalid session access, what can FortiWeb do? (Choose three.)

Reply with a ''403 Forbidden'' HTTP error

Allow the page access, but log the violation

Automatically redirect the client to the login page

Reply with a ''403 Forbidden'' HTTP error

Allow the page access, but log the violation

Automatically redirect the client to the login page

Display an access policy message, then allow the client to continue, redirecting them to their requested page

Prompt the client to authenticate

Which is true about HTTPS on FortiWeb? (Choose three.)

For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.

In true transparent mode, the TLS session terminator is a protected web server.

In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.

For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.

After enabling HSTS, redirects to HTTPS are no longer necessary.

In true transparent mode, the TLS session terminator is a protected web server.

Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.

In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.

Which of the following is true about Local User Accounts?

Can be used for site publishing

Must be assigned regardless of any other authentication

Can be used for site publishing

Best suited for large environments with many users

Fortinet NSE6_FWB-6.4 Practice Test 2 - Free Online Exam Prep & Questions

You are deploying FortiWeb 6.4 in an Amazon Web Services cloud. Which 2 lines of this initial setup via CLI are incorrect? (Choose two.)

Fortinet NSE6_FWB-6.4 image Question 41 26873 09182024190643000000

Become a Premium Member for full access

Unlock Premium Member

Fortinet NSE6_FWB-6.4 Practice Test 2

Question

Fortinet NSE6_FWB-6.4 Practice Tests

Practice Tests