Fortinet NSE6_FWB-6.0 Online Practice Questions and Exam Preparation

Fortinet NSE6_FWB-6.0 Online Questions & Answers

• Question 1:

  What can an administrator do if a client has been incorrectly Period Blocked?

  A. Disconnect the client from the network
  B. Manually release the IP from the temporary Blacklist
  C. Nothing, it is not possible to override a Period Block
  D. Force a new IP address to the client.
  B. Manually release the IP from the temporary Blacklist

• Question 2:

  Under what circumstances would you want to use the temporary uncompress feature of FortiWeb?

  A. In the case of compression being done on the FortiWeb, to inspect the content of the compressed file
  B. In the case of the file being a .MP3 music file
  C. In the case of compression being done on the web server, to inspect the content of the compressed file.
  D. In the case of the file being an .MP4 video
  C. In the case of compression being done on the web server, to inspect the content of the compressed file.

• Question 3:

  When the FortiWeb is configured in Reverse Proxy mode and the FortiGate is configured as an SNAT device, what IP address will the FortiGate's Real Server configuration point at?

  A. Virtual Server IP on the FortiGate
  B. Server's real IP
  C. FortiWeb's real IP
  D. IP Address of the Virtual Server on the FortiWeb
  A. Virtual Server IP on the FortiGate

• Question 4:

  What capability can FortiWeb add to your Web App that your Web App may or may not already have?

  A. Automatic backup and recovery
  B. High Availability
  C. HTTP/HTML Form Authentication
  D. SSL Inspection
  D. SSL Inspection

• Question 5:

  Reverse-proxy mode is best suited for use in which type of environment?

  A. New networks where infrastructure is not yet defined
  B. Environments where you cannot change your IP addressing scheme
  C. Flexible environments where you can easily change the IP addressing scheme
  D. Small Office/Home Office environments
  B. Environments where you cannot change your IP addressing scheme

• Question 6:

  What is one of the key benefits of the FortiGuard IP Reputation feature?

  A. FortiGuard maintains a list of public IPs with a bad reputation for participating in attacks.
  B. It is updated once per year
  C. Provides a Document of IP addresses that are suspect, so that administrators can manually update their blacklists
  D. It maintains a list of private IP addresses
  A. FortiGuard maintains a list of public IPs with a bad reputation for participating in attacks.

• Question 7:

  What benefit does Auto Learning provide?

  A. Automatically identifies and blocks suspicious IPs
  B. FortiWeb scans all traffic without taking action and makes recommendations on rules
  C. Automatically builds rules sets
  D. Automatically blocks all detected threats
  C. Automatically builds rules sets

• Question 8:

  Which of the following FortiWeb features is part of the mitigation tools against OWASP A4 threats?

  A. Sensitive info masking
  B. Poison Cookie detection
  C. Session Management
  D. Brute Force blocking
  C. Session Management

• Question 9:

  When viewing the attack logs on your FortiWeb, which IP Address is shown for the client when using XFF Header rules?

  A. FortiGate's public IP
  B. FortiGate's local IP
  C. FortiWeb's IP
  D. Client's real IP
  D. Client's real IP

• Question 10:

  Which implementation is best suited for a deployment that must meet compliance criteria?

  A. SSL Inspection with FortiWeb in Transparency mode
  B. SSL Offloading with FortiWeb in reverse proxy mode
  C. SSL Inspection with FrotiWeb in Reverse Proxy mode
  D. SSL Offloading with FortiWeb in Transparency Mode
  C. SSL Inspection with FrotiWeb in Reverse Proxy mode