Fortinet Fortinet Certifications NSE6_FWB-6.0 Questions & Answers

• Question 11:

  Reverse-proxy mode is best suited for use in which type of environment?

  A. New networks where infrastructure is not yet defined

  B. Environments where you cannot change your IP addressing scheme

  C. Flexible environments where you can easily change the IP addressing scheme

  D. Small Office/Home Office environments

  Correct Answer: B

• Question 12:

  An e-commerce web app is used by small businesses. Clients often access it from offices behind a router,

  where clients are on an IPv4 private network LAN. You need to protect the web application from denial of

  service attacks that use request floods.

  What FortiWeb feature should you configure?

  A. Enable "Shared IP" and configure the separate rate limits for requests from NATted source IPs.

  B. Configure FortiWeb to use "X-Forwarded-For:" headers to find each client's private network IP, and to block attacks using that.

  C. Enable SYN cookies.

  D. Configure a server policy that matches requests from shared Internet connections.

  Correct Answer: C

• Question 13:

  Under which circumstances does FortiWeb use its own certificates? (Choose Two)

  A. Secondary HTTPS connection to server where FortiWeb acts as a client

  B. HTTPS to clients

  C. HTTPS access to GUI

  D. HTTPS to FortiGate

  Correct Answer: AC

• Question 14:

  What benefit does Auto Learning provide?

  A. Automatically identifies and blocks suspicious IPs

  B. FortiWeb scans all traffic without taking action and makes recommendations on rules

  C. Automatically builds rules sets

  D. Automatically blocks all detected threats

  Correct Answer: C

• Question 15:

  How does offloading compression to FortiWeb benefit your network?

  A. free up resources on the database server

  B. Free up resources on the web server

  C. reduces file size on the client's storage

  D. free up resources on the FortiGate

  Correct Answer: B

• Question 16:

  When the FortiWeb is configured in Reverse Proxy mode and the FortiGate is configured as an SNAT device, what IP address will the FortiGate's Real Server configuration point at?

  A. Virtual Server IP on the FortiGate

  B. Server's real IP

  C. FortiWeb's real IP

  D. IP Address of the Virtual Server on the FortiWeb

  Correct Answer: A

• Question 17:

  You are deploying FortiWeb 6.0 in an Amazon Web Services cloud. Which 2 lines of this initial setup via CLI are incorrect? (Choose two.)

  

  A. 6

  B. 9

  C. 3

  D. 2

  Correct Answer: AC

• Question 18:

  Under what circumstances would you want to use the temporary uncompress feature of FortiWeb?

  A. In the case of compression being done on the FortiWeb, to inspect the content of the compressed file

  B. In the case of the file being a .MP3 music file

  C. In the case of compression being done on the web server, to inspect the content of the compressed file.

  D. In the case of the file being an .MP4 video

  Correct Answer: C

• Question 19:

  What is one of the key benefits of the FortiGuard IP Reputation feature?

  A. FortiGuard maintains a list of public IPs with a bad reputation for participating in attacks.

  B. It is updated once per year

  C. Provides a Document of IP addresses that are suspect, so that administrators can manually update their blacklists

  D. It maintains a list of private IP addresses

  Correct Answer: A

• Question 20:

  What other consideration must you take into account when configuring Defacement protection A. Use FortiWeb to block SQL Injections and keep regular backups of the Database

  B. Also incorporate a FortiADC into your network

  C. None. FortiWeb completely secures the site against defacement attacks

  D. Configure the FortiGate to perform Anti-Defacement as well

  Correct Answer: D