Fortinet NSE6_FWB-6.0 Online Practice Questions and Exam Preparation

Fortinet NSE6_FWB-6.0 Online Questions & Answers

• Question 21:

  You are using HTTP content routing on FortiWeb. Requests for web app A should be forwarded to a cluster of web servers which all host the same web app. Requests for web app B should be forwarded to a different, single web server. Which is true about the solution?

  A. Static or policy-based routes are not required.
  B. To achieve HTTP content routing, you must chain policies: the first policy accepts all traffic, and forwards requests for web app A to the virtual server for policy A. It also forwards requests for web app B to the virtual server for policy B. Policy A and Policy B apply their app-specific protection profiles, and then distribute that app's traffic among all members of the server farm.
  C. You must put the single web server into a server pool in order to use it with HTTP content routing.
  D. The server policy applies the same protection profile to all its protected web apps.
  B. To achieve HTTP content routing, you must chain policies: the first policy accepts all traffic, and forwards requests for web app A to the virtual server for policy A. It also forwards requests for web app B to the virtual server for policy B. Policy A and Policy B apply their app-specific protection profiles, and then distribute that app's traffic among all members of the server farm.

• Question 22:

  You are deploying FortiWeb 6.0 in an Amazon Web Services cloud. Which 2 lines of this initial setup via CLI are incorrect? (Choose two.)

  

  A. 6
  B. 9
  C. 3
  D. 2
  A. 6
  C. 3

• Question 23:

  How does your FortiWeb configuration differ if the FortiWeb is upstream of the SNAT device instead of downstream of the SNAT device?

  A. You must enable the "Use" X-Forwarded-For: option.
  B. FortiWeb must be set for Transparent Mode
  C. No special configuration required
  D. You must enable "Add" X-Forwarded-For: instead of the "Use" X-Forwarded-For: option.
  A. You must enable the "Use" X-Forwarded-For: option.

• Question 24:

  You've configured an authentication rule with delegation enabled on FortiWeb. What happens when a user tries to access the web application?

  A. FrotiWeb redirects users to a FortiAuthenticator page, then if the user authenticates successfully, FortiGate signals to FortiWeb to allow access to the web app
  B. ForitWeb redirects the user to the web app's authentication page
  C. FortiWeb forwards the HTTP challenge from the server to the client, then monitors the reply, allowing access if the user authenticates successfully
  D. FortiWeb replies with a HTTP challenge of behalf of the server, the if the user authenticates successfully, FortiWeb allows the request and also includes credentials in the request that it forwards to the web app
  A. FrotiWeb redirects users to a FortiAuthenticator page, then if the user authenticates successfully, FortiGate signals to FortiWeb to allow access to the web app

• Question 25:

  When generating a protection configuration from an auto learning report what critical step must you do before generating the final protection configuration?

  A. Restart the FortiWeb to clear the caches
  B. Drill down in the report to correct any false positives.
  C. Activate the report to create t profile
  D. Take the FortiWeb offline to apply the profile
  B. Drill down in the report to correct any false positives.

• Question 26:

  Which operation mode does not require additional configuration in order to allow FTP traffic to your web server?

  A. Offline Protection
  B. Transparent Inspection
  C. True Transparent Proxy
  D. Reverse-Proxy
  B. Transparent Inspection

• Question 27:

  Which of the following is true about Local User Accounts?

  A. Must be assigned regardless of any other authentication
  B. Can be used for Single Sign On
  C. Can be used for site publishing
  D. Best suited for large environments with many users
  A. Must be assigned regardless of any other authentication

• Question 28:

  In Reverse proxy mode, how does FortiWeb handle traffic that does not match any defined policies?

  A. Non-matching traffic is allowed
  B. non-Matching traffic is held in buffer
  C. Non-matching traffic is Denied
  D. Non-matching traffic is rerouted to FortiGate
  C. Non-matching traffic is Denied

• Question 29:

  When integrating FortiWeb and FortiAnalyzer, why is the selection for FortiWeb Version critical? (Choose two)

  A. Defines Log file format
  B. Defines communication protocol
  C. Defines Database Schema
  D. Defines Log storage location
  A. Defines Log file format
  D. Defines Log storage location

• Question 30:

  You are configuring FortiAnalyzer to store logs from FortiWeb. Which is true?

  A. FortiAnalyzer will store antivirus and DLP archives from FortiWeb.
  B. You must enable ADOMs on FortiAnalyzer.
  C. To store logs from FortiWeb 6.0, on FortiAnalyzer, you must select "FrotiWeb 5.4".
  D. FortiWeb will query FortiAnalyzer for reports, instead of generating them locally.
  B. You must enable ADOMs on FortiAnalyzer.