Fortinet Fortinet Certifications NSE6_FWB-6.4 Questions & Answers

• Question 1:

  Under which circumstances does FortiWeb use its own certificates? (Choose Two)

  A. Secondary HTTPS connection to server where FortiWeb acts as a client

  B. HTTPS to clients

  C. HTTPS access to GUI

  D. HTTPS to FortiGate

  Correct Answer: AC

• Question 2:

  Under what circumstances would you want to use the temporary uncompress feature of FortiWeb?

  A. In the case of compression being done on the FortiWeb, to inspect the content of the compressed file

  B. In the case of the file being a .MP3 music file

  C. In the case of compression being done on the web server, to inspect the content of the compressed file.

  D. In the case of the file being an .MP4 video

  Correct Answer: C

• Question 3:

  What benefit does Auto Learning provide?

  A. Automatically identifies and blocks suspicious IPs

  B. FortiWeb scans all traffic without taking action and makes recommendations on rules

  C. Automatically builds rules sets

  D. Automatically blocks all detected threats

  Correct Answer: C

• Question 4:

  What other consideration must you take into account when configuring Defacement protection

  A. Use FortiWeb to block SQL Injections and keep regular backups of the Database

  B. Also incorporate a FortiADC into your network

  C. None. FortiWeb completely secures the site against defacement attacks

  D. Configure the FortiGate to perform Anti-Defacement as well

  Correct Answer: A

• Question 5:

  In which operation mode(s) can FortiWeb modify HTTP packets? (Choose two.)

  A. Transparent Inspection

  B. Offline protection

  C. True transparent proxy

  D. Reverse proxy

  Correct Answer: CD

• Question 6:

  How does offloading compression to FortiWeb benefit your network?

  A. free up resources on the database server

  B. Free up resources on the web server

  C. reduces file size on the client's storage

  D. free up resources on the FortiGate

  Correct Answer: B

• Question 7:

  Which algorithm is used to build mathematical models for bot detection?

  A. HCM

  B. SVN

  C. SVM

  D. HMM

  Correct Answer: C

  FortiWeb uses SVM (Support Vector Machine) algorithm to build up the bot detection model Reference: https://docs.fortinet.com/document/fortiweb/6.3.7/administration-guide/193258/machine-learning

• Question 8:

  Which three statements about HTTPS on FortiWeb are true? (Choose three.)

  A. For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.

  B. After enabling HSTS, redirects to HTTPS are no longer necessary.

  C. In true transparent mode, the TLS session terminator is a protected web server.

  D. Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.

  E. In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.

  Correct Answer: CDE

  Reference: https://docs.fortinet.com/document/fortiweb/6.3.0/administration-guide/742465/supported-cipher-suites-protocol-versions

• Question 9:

  FortiWeb offers the same load balancing algorithms as FortiGate.

  Which two Layer 7 switch methods does FortiWeb also offer? (Choose two.)

  A. Round robin

  B. HTTP session-based round robin

  C. HTTP user-based round robin

  D. HTTP content routes

  Correct Answer: AD

  Reference: https://docs.fortinet.com/document/fortiweb/6.3.0/administration-guide/399384/defining-your-web-servers http://fortinet.globalgate.com.ar/pdfs/FortiWeb/FortiWeb_DS.pdf

• Question 10:

  How does your FortiWeb configuration differ if the FortiWeb is upstream of the SNAT device instead of downstream of the SNAT device?

  A. You must enable the "Use" X-Forwarded-For: option.

  B. FortiWeb must be set for Transparent Mode

  C. No special configuration required

  D. You must enable "Add" X-Forwarded-For: instead of the "Use" X-Forwarded-For: option.

  Correct Answer: D