Home / Fortinet / NSE6_FWB-6.4

Fortinet NSE6_FWB-6.4 Practice Test - Questions Answers, Page 2

Question list

List of questions

Question 11

(0)

What key factor must be considered when setting brute force rate limiting and blocking?

Question 12

(0)

Refer to the exhibits. FortiWeb is configured in reverse proxy mode and it is deployed downstream to FortiGate. Based on the configuration shown in the exhibits, which of the following statemen

Question 13

(0)

Which two statements about running a vulnerability scan are true? (Choose two.)

Question 14

(0)

FortiWeb offers the same load balancing algorithms as FortiGate. Which two Layer 7 switch methods does FortiWeb also offer? (Choose two.)

Question 15

(0)

Which would be a reason to implement HTTP rewriting?

Question 16

(0)

Refer to the exhibit. FortiADC is applying SNAT to all inbound traffic going to the servers. When an attack occurs, FortiWeb blocks traffic based on the 192.0.2.1 source IP address, which belongs

Question 17

(0)

Which statement about local user accounts is true?

Question 18

(0)

Refer to the exhibit. Based on the configuration, what would happen if this FortiWeb were to lose power? (Choose two.)

Question 19

(0)

Refer to the exhibit. FortiWeb is configured to block traffic from Japan to your web application server. However, in the logs, the administrator is seeing traffic allowed from one particular IP a

Question 20

(0)

Which algorithm is used to build mathematical models for bot detection?

Question 11

What key factor must be considered when setting brute force rate limiting and blocking?

A single client contacting multiple resources

Multiple clients sharing a single Internet connection

Multiple clients from geographically diverse locations

Multiple clients connecting to multiple resources

Show Answer Comment (0)

Question 12

Refer to the exhibits.

FortiWeb is configured in reverse proxy mode and it is deployed downstream to FortiGate. Based on the configuration shown in the exhibits, which of the following statements is true?

FortiGate should forward web traffic to the server pool IP addresses.

The configuration is incorrect. FortiWeb should always be located upstream to FortiGate.

You must disable the Preserve Client IP setting on FotriGate for this configuration to work.

FortiGate should forward web traffic to virtual server IP address.

Show Answer Comment (0)

Question 13

Which two statements about running a vulnerability scan are true? (Choose two.)

You should run the vulnerability scan during a maintenance window.

You should run the vulnerability scan in a test environment.

Vulnerability scanning increases the load on FortiWeb, so it should be avoided.

You should run the vulnerability scan on a live website to get accurate results.

Show Answer Comment (0)

Question 14

FortiWeb offers the same load balancing algorithms as FortiGate.

Which two Layer 7 switch methods does FortiWeb also offer? (Choose two.)

Round robin

HTTP session-based round robin

HTTP user-based round robin

HTTP content routes

Show Answer Comment (0)

Question 15

Which would be a reason to implement HTTP rewriting?

The original page has moved to a new URL

To replace a vulnerable function in the requested URL

To send the request to secure channel

The original page has moved to a new IP address

Show Answer Comment (0)

FortiADC is applying SNAT to all inbound traffic going to the servers. When an attack occurs, FortiWeb blocks traffic based on the 192.0.2.1 source IP address, which belongs to FortiADC. The setup is breaking all connectivity and genuine clients are not able to access the servers.

What must the administrator do to avoid this problem? (Choose two.)

Enable the Use X-Forwarded-For setting on FortiWeb.

No Special configuration is required; connectivity will be re-established after the set timeout.

Place FortiWeb in front of FortiADC.

Enable the Add X-Forwarded-For setting on FortiWeb.

Show Answer Comment (0)

Question 17

Which statement about local user accounts is true?

They are best suited for large environments with many users.

They cannot be used for site publishing.

They must be assigned, regardless of any other authentication.

They can be used for SSO.

Show Answer Comment (0)

Question 18

Refer to the exhibit.

Based on the configuration, what would happen if this FortiWeb were to lose power? (Choose two.)

Traffic that passes between port5 and port6 will be inspected.

Traffic will be interrupted between port3 and port4.

All traffic will be interrupted.

Traffic will pass between port5 and port6 uninspected.

Show Answer Comment (0)

Question 19

Refer to the exhibit.

FortiWeb is configured to block traffic from Japan to your web application server. However, in the logs, the administrator is seeing traffic allowed from one particular IP address which is geo-located in Japan.

What can the administrator do to solve this problem? (Choose two.)

Manually update the geo-location IP addresses for Japan.

If the IP address is configured as a geo reputation exception, remove it.

Configure the IP address as a blacklisted IP address.

If the IP address is configured as an IP reputation exception, remove it.

Show Answer Comment (0)