Home / Fortinet / NSE6_FWB-6.4

Fortinet NSE6_FWB-6.4 Practice Test - Questions Answers, Page 4

Question list

List of questions

Question 31

(0)

When viewing the attack logs on FortiWeb, which client IP address is shown when you are using XFF header rules?

Question 32

(0)

Which three statements about HTTPS on FortiWeb are true? (Choose three.)

Question 33

(0)

What is one of the key benefits of the FortiGuard IP reputation feature?

Question 34

(0)

How does FortiWeb protect against defacement attacks?

Question 35

(0)

You are using HTTP content routing on FortiWeb. You want requests for web application A to be forwarded to a cluster of web servers, which all host the same web application. You want requests for we

Question 36

(0)

When generating a protection configuration from an auto learning report what critical step must you do before generating the final protection configuration?

Question 37

(0)

How does an ADOM differ from a VDOM?

Question 38

(0)

In which operation mode(s) can FortiWeb modify HTTP packets? (Choose two.)

Question 39

(0)

What other consideration must you take into account when configuring Defacement protection

Question 40

(0)

Under what circumstances would you want to use the temporary uncompress feature of FortiWeb?

Question 31

When viewing the attack logs on FortiWeb, which client IP address is shown when you are using XFF header rules?

FortiGate public IP

FortiWeb IP

FortiGate local IP

Client real IP

Show Answer Comment (0)

Question 32

Which three statements about HTTPS on FortiWeb are true? (Choose three.)

For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.

After enabling HSTS, redirects to HTTPS are no longer necessary.

In true transparent mode, the TLS session terminator is a protected web server.

Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.

In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.

Show Answer Comment (0)

Question 33

What is one of the key benefits of the FortiGuard IP reputation feature?

It maintains a list of private IP addresses.

It provides a document of IP addresses that are suspect, so that administrators can manually update their blacklists.

It is updated once per year.

It maintains a list of public IPs with a bad reputation for participating in attacks.

Show Answer Comment (0)

Question 34

How does FortiWeb protect against defacement attacks?

It keeps a complete backup of all files and the database.

It keeps hashes of files and periodically compares them to the server.

It keeps full copies of all files and directories.

It keeps a live duplicate of the database.

Show Answer Comment (0)

You are using HTTP content routing on FortiWeb. You want requests for web application A to be forwarded to a cluster of web servers, which all host the same web application. You want requests for web application B to be forwarded to a different, single web server.

Which statement about this solution is true?

The server policy applies the same protection profile to all of its protected web applications.

You must put the single web server in to a server pool, in order to use it with HTTP content routing.

You must chain policies so that requests for web application A go to the virtual server for policy A, and requests for web application B go to the virtual server for policy B.

Static or policy-based routes are not required.

Show Answer Comment (0)

Question 36

When generating a protection configuration from an auto learning report what critical step must you do before generating the final protection configuration?

Restart the FortiWeb to clear the caches

Drill down in the report to correct any false positives.

Activate the report to create t profile

Take the FortiWeb offline to apply the profile

Show Answer Comment (0)