Fortinet NSE6_FWB-6.1 Online Practice Questions and Exam Preparation

Fortinet NSE6_FWB-6.1 Online Questions & Answers

• Question 21:

  A client is trying to start a session from a page that should normally be accessible only after they have logged in. When a start page rule detects the invalid session access, what can FortiWeb do? (Choose three.)

  A. Reply with a "403 Forbidden" HTTP error
  B. Allow the page access, but log the violation
  C. Automatically redirect the client to the login page
  D. Display an access policy message, then allow the client to continue, redirecting them to their requested page
  E. Prompt the client to authenticate
  A. Reply with a "403 Forbidden" HTTP error
  B. Allow the page access, but log the violation
  C. Automatically redirect the client to the login page

• Question 22:

  You are configuring FortiAnalyzer to store logs from FortiWeb. Which is true?

  A. FortiAnalyzer will store antivirus and DLP archives from FortiWeb.
  B. You must enable ADOMs on FortiAnalyzer.
  C. To store logs from FortiWeb 6.0, on FortiAnalyzer, you must select "FrotiWeb 5.4".
  D. FortiWeb will query FortiAnalyzer for reports, instead of generating them locally.
  B. You must enable ADOMs on FortiAnalyzer.

• Question 23:

  You've configured an authentication rule with delegation enabled on FortiWeb. What happens when a user tries to access the web application?

  A. FrotiWeb redirects users to a FortiAuthenticator page, then if the user authenticates successfully, FortiGate signals to FortiWeb to allow access to the web app
  B. ForitWeb redirects the user to the web app's authentication page
  C. FortiWeb forwards the HTTP challenge from the server to the client, then monitors the reply, allowing access if the user authenticates successfully
  D. FortiWeb replies with a HTTP challenge of behalf of the server, the if the user authenticates successfully, FortiWeb allows the request and also includes credentials in the request that it forwards to the web app
  A. FrotiWeb redirects users to a FortiAuthenticator page, then if the user authenticates successfully, FortiGate signals to FortiWeb to allow access to the web app

• Question 24:

  In Reverse proxy mode, how does FortiWeb handle traffic that does not match any defined policies?

  A. Non-matching traffic is allowed
  B. non-Matching traffic is held in buffer
  C. Non-matching traffic is Denied
  D. Non-matching traffic is rerouted to FortiGate
  C. Non-matching traffic is Denied

• Question 25:

  Under what circumstances would you want to use the temporary uncompress feature of FortiWeb?

  A. In the case of compression being done on the FortiWeb, to inspect the content of the compressed file
  B. In the case of the file being a .MP3 music file
  C. In the case of compression being done on the web server, to inspect the content of the compressed file.
  D. In the case of the file being an .MP4 video
  C. In the case of compression being done on the web server, to inspect the content of the compressed file.

• Question 26:

  When the FortiWeb is configured in Reverse Proxy mode and the FortiGate is configured as an SNAT device, what IP address will the FortiGate's Real Server configuration point at?

  A. Virtual Server IP on the FortiGate
  B. Server's real IP
  C. FortiWeb's real IP
  D. IP Address of the Virtual Server on the FortiWeb
  A. Virtual Server IP on the FortiGate

• Question 27:

  When generating a protection configuration from an auto learning report what critical step must you do before generating the final protection configuration?

  A. Restart the FortiWeb to clear the caches
  B. Drill down in the report to correct any false positives.
  C. Activate the report to create t profile
  D. Take the FortiWeb offline to apply the profile
  B. Drill down in the report to correct any false positives.

• Question 28:

  How does an ADOM differ from a VDOM?

  A. ADOMs do not have virtual networking
  B. ADOMs improve performance by offloading some functions.
  C. ADOMs only affect specific functions, and do not provide full separation like VDOMs do.
  D. Allows you to have 1 administrator for multiple tenants
  D. Allows you to have 1 administrator for multiple tenants

• Question 29:

  What role does FortiWeb play in ensuring PCI DSS compliance?

  A. PCI specifically requires a WAF
  B. Provides credit card processing capabilities
  C. Provide ability to securely process cash transactions
  D. Provides load balancing between multiple web servers
  B. Provides credit card processing capabilities

• Question 30:

  What other consideration must you take into account when configuring Defacement protection

  A. Use FortiWeb to block SQL Injections and keep regular backups of the Database
  B. Also incorporate a FortiADC into your network
  C. None. FortiWeb completely secures the site against defacement attacks
  D. Configure the FortiGate to perform Anti-Defacement as well
  D. Configure the FortiGate to perform Anti-Defacement as well