Fortinet NSE6_FWB-6.1 Online Practice Questions and Exam Preparation

Fortinet NSE6_FWB-6.1 Online Questions & Answers

• Question 1:

  Reverse-proxy mode is best suited for use in which type of environment?

  A. New networks where infrastructure is not yet defined
  B. Environments where you cannot change your IP addressing scheme
  C. Flexible environments where you can easily change the IP addressing scheme
  D. Small Office/Home Office environments
  B. Environments where you cannot change your IP addressing scheme

• Question 2:

  Which is true about HTTPS on FortiWeb? (Choose three.)

  A. For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.
  B. After enabling HSTS, redirects to HTTPS are no longer necessary.
  C. In true transparent mode, the TLS session terminator is a protected web server.
  D. Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.
  E. In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.
  A. For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.
  C. In true transparent mode, the TLS session terminator is a protected web server.
  E. In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.

• Question 3:

  What is one of the key benefits of the FortiGuard IP Reputation feature?

  A. FortiGuard maintains a list of public IPs with a bad reputation for participating in attacks.
  B. It is updated once per year
  C. Provides a Document of IP addresses that are suspect, so that administrators can manually update their blacklists
  D. It maintains a list of private IP addresses
  A. FortiGuard maintains a list of public IPs with a bad reputation for participating in attacks.

• Question 4:

  How does offloading compression to FortiWeb benefit your network?

  A. free up resources on the database server
  B. Free up resources on the web server
  C. reduces file size on the client's storage
  D. free up resources on the FortiGate
  B. Free up resources on the web server

• Question 5:

  What benefit does Auto Learning provide?

  A. Automatically identifies and blocks suspicious IPs
  B. FortiWeb scans all traffic without taking action and makes recommendations on rules
  C. Automatically builds rules sets
  D. Automatically blocks all detected threats
  C. Automatically builds rules sets

• Question 6:

  Which of the following would be a reason for implementing rewrites?

  A. Page has been moved to a new URL
  B. Page has been moved to a new IP address
  C. Replace vulnerable functions.
  D. Send connection to secure channel
  A. Page has been moved to a new URL

• Question 7:

  Which of the following is true about Local User Accounts?

  A. Must be assigned regardless of any other authentication
  B. Can be used for Single Sign On
  C. Can be used for site publishing
  D. Best suited for large environments with many users
  A. Must be assigned regardless of any other authentication

• Question 8:

  Which operation mode does not require additional configuration in order to allow FTP traffic to your web server?

  A. Offline Protection
  B. Transparent Inspection
  C. True Transparent Proxy
  D. Reverse-Proxy
  B. Transparent Inspection

• Question 9:

  Which of the following FortiWeb features is part of the mitigation tools against OWASP A4 threats?

  A. Sensitive info masking
  B. Poison Cookie detection
  C. Session Management
  D. Brute Force blocking
  C. Session Management

• Question 10:

  When viewing the attack logs on your FortiWeb, which IP Address is shown for the client when using XFF Header rules?

  A. FortiGate's public IP
  B. FortiGate's local IP
  C. FortiWeb's IP
  D. Client's real IP
  D. Client's real IP