Fortinet Fortinet Certifications NSE6_FWB-6.1 Questions & Answers

• Question 11:

  You are using HTTP content routing on FortiWeb. Requests for web app A should be forwarded to a

  cluster of web servers which all host the same web app. Requests for web app B should be forwarded to a

  different, single web server.

  Which is true about the solution?

  A. Static or policy-based routes are not required.

  B. To achieve HTTP content routing, you must chain policies: the first policy accepts all traffic, and forwards requests for web app A to the virtual server for policy A. It also forwards requests for web app B to the virtual server for policy B. Policy A and Policy B apply their app-specific protection profiles, and then distribute that app's traffic among all members of the server farm.

  C. You must put the single web server into a server pool in order to use it with HTTP content routing.

  D. The server policy applies the same protection profile to all its protected web apps.

  Correct Answer: B

• Question 12:

  In Reverse proxy mode, how does FortiWeb handle traffic that does not match any defined policies?

  A. Non-matching traffic is allowed

  B. non-Matching traffic is held in buffer

  C. Non-matching traffic is Denied

  D. Non-matching traffic is rerouted to FortiGate

  Correct Answer: C

• Question 13:

  You've configured an authentication rule with delegation enabled on FortiWeb. What happens when a user tries to access the web application?

  A. FrotiWeb redirects users to a FortiAuthenticator page, then if the user authenticates successfully, FortiGate signals to FortiWeb to allow access to the web app

  B. ForitWeb redirects the user to the web app's authentication page

  C. FortiWeb forwards the HTTP challenge from the server to the client, then monitors the reply, allowing access if the user authenticates successfully

  D. FortiWeb replies with a HTTP challenge of behalf of the server, the if the user authenticates successfully, FortiWeb allows the request and also includes credentials in the request that it forwards to the web app

  Correct Answer: A

• Question 14:

  When integrating FortiWeb and FortiAnalyzer, why is the selection for FortiWeb Version critical? (Choose two)

  A. Defines Log file format

  B. Defines communication protocol

  C. Defines Database Schema

  D. Defines Log storage location

  Correct Answer: AD

• Question 15:

  What role does FortiWeb play in ensuring PCI DSS compliance?

  A. PCI specifically requires a WAF

  B. Provides credit card processing capabilities

  C. Provide ability to securely process cash transactions

  D. Provides load balancing between multiple web servers

  Correct Answer: B

• Question 16:

  How does offloading compression to FortiWeb benefit your network?

  A. free up resources on the database server

  B. Free up resources on the web server

  C. reduces file size on the client's storage

  D. free up resources on the FortiGate

  Correct Answer: B

• Question 17:

  Which of the following is true about Local User Accounts?

  A. Must be assigned regardless of any other authentication

  B. Can be used for Single Sign On

  C. Can be used for site publishing

  D. Best suited for large environments with many users

  Correct Answer: A

• Question 18:

  In which operation mode(s) can FortiWeb modify HTTP packets? (Choose two.)

  A. Transparent Inspection

  B. Offline protection

  C. True transparent proxy

  D. Reverse proxy

  Correct Answer: D

• Question 19:

  What other consideration must you take into account when configuring Defacement protection A. Use FortiWeb to block SQL Injections and keep regular backups of the Database

  B. Also incorporate a FortiADC into your network

  C. None. FortiWeb completely secures the site against defacement attacks

  D. Configure the FortiGate to perform Anti-Defacement as well

  Correct Answer: D

• Question 20:

  Under what circumstances would you want to use the temporary uncompress feature of FortiWeb?

  A. In the case of compression being done on the FortiWeb, to inspect the content of the compressed file

  B. In the case of the file being a .MP3 music file

  C. In the case of compression being done on the web server, to inspect the content of the compressed file.

  D. In the case of the file being an .MP4 video

  Correct Answer: C