Fortinet NSE6_FWB-6.4 Online Practice Questions and Exam Preparation

Fortinet NSE6_FWB-6.4 Online Questions & Answers

• Question 1:

  Under which circumstances does FortiWeb use its own certificates? (Choose Two)

  A. Secondary HTTPS connection to server where FortiWeb acts as a client
  B. HTTPS to clients
  C. HTTPS access to GUI
  D. HTTPS to FortiGate
  A. Secondary HTTPS connection to server where FortiWeb acts as a client
  C. HTTPS access to GUI

• Question 2:

  What benefit does Auto Learning provide?

  A. Automatically identifies and blocks suspicious IPs
  B. FortiWeb scans all traffic without taking action and makes recommendations on rules
  C. Automatically builds rules sets
  D. Automatically blocks all detected threats
  C. Automatically builds rules sets

• Question 3:

  Under what circumstances would you want to use the temporary uncompress feature of FortiWeb?

  A. In the case of compression being done on the FortiWeb, to inspect the content of the compressed file
  B. In the case of the file being a .MP3 music file
  C. In the case of compression being done on the web server, to inspect the content of the compressed file.
  D. In the case of the file being an .MP4 video
  C. In the case of compression being done on the web server, to inspect the content of the compressed file.

• Question 4:

  Which three statements about HTTPS on FortiWeb are true? (Choose three.)

  A. For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.
  B. After enabling HSTS, redirects to HTTPS are no longer necessary.
  C. In true transparent mode, the TLS session terminator is a protected web server.
  D. Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.
  E. In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.
  C. In true transparent mode, the TLS session terminator is a protected web server.
  D. Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.
  E. In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.

  ---

  explanation:

  Reference: https://docs.fortinet.com/document/fortiweb/6.3.0/administration-guide/742465/supported-cipher-suites-protocol-versions

• Question 5:

  Which algorithm is used to build mathematical models for bot detection?

  A. HCM
  B. SVN
  C. SVM
  D. HMM
  C. SVM

  ---

  explanation:

  FortiWeb uses SVM (Support Vector Machine) algorithm to build up the bot detection model Reference: https://docs.fortinet.com/document/fortiweb/6.3.7/administration-guide/193258/machine-learning

• Question 6:

  How does offloading compression to FortiWeb benefit your network?

  A. free up resources on the database server
  B. Free up resources on the web server
  C. reduces file size on the client's storage
  D. free up resources on the FortiGate
  B. Free up resources on the web server

• Question 7:

  In which operation mode(s) can FortiWeb modify HTTP packets? (Choose two.)

  A. Transparent Inspection
  B. Offline protection
  C. True transparent proxy
  D. Reverse proxy
  C. True transparent proxy
  D. Reverse proxy

• Question 8:

  What other consideration must you take into account when configuring Defacement protection

  A. Use FortiWeb to block SQL Injections and keep regular backups of the Database
  B. Also incorporate a FortiADC into your network
  C. None. FortiWeb completely secures the site against defacement attacks
  D. Configure the FortiGate to perform Anti-Defacement as well
  A. Use FortiWeb to block SQL Injections and keep regular backups of the Database

• Question 9:

  FortiWeb offers the same load balancing algorithms as FortiGate.

  Which two Layer 7 switch methods does FortiWeb also offer? (Choose two.)

  A. Round robin
  B. HTTP session-based round robin
  C. HTTP user-based round robin
  D. HTTP content routes
  A. Round robin
  D. HTTP content routes

  ---

  explanation:

  Reference: https://docs.fortinet.com/document/fortiweb/6.3.0/administration-guide/399384/defining-your-web-servers http://fortinet.globalgate.com.ar/pdfs/FortiWeb/FortiWeb_DS.pdf

• Question 10:

  When the FortiWeb is configured in Reverse Proxy mode and the FortiGate is configured as an SNAT device, what IP address will the FortiGate's Real Server configuration point at?

  A. Virtual Server IP on the FortiGate
  B. Server's real IP
  C. FortiWeb's real IP
  D. IP Address of the Virtual Server on the FortiWeb
  A. Virtual Server IP on the FortiGate