Fortinet Fortinet Certifications NSE6_FWB-6.4 Questions & Answers

• Question 21:

  Which regex expression is the correct format for redirecting the URL http://www.example.com?

  A. www\.example\.com

  B. www.example.com

  C. www\example\com

  D. www/.example/.com

  Correct Answer: B

  \1://www.company.com/\2/\3 Reference: https://learn.akamai.com/en-us/webhelp/edge-redirector/edge-redirector-guide/GUID-0C22DFC2-DCC4-42AF-BDB2-9537FBEE03FD.html

• Question 22:

  Which of the following would be a reason for implementing rewrites?

  A. Page has been moved to a new URL

  B. Page has been moved to a new IP address

  C. Replace vulnerable functions.

  D. Send connection to secure channel

  Correct Answer: C

• Question 23:

  When generating a protection configuration from an auto learning report what critical step must you do before generating the final protection configuration?

  A. Restart the FortiWeb to clear the caches

  B. Drill down in the report to correct any false positives.

  C. Activate the report to create t profile

  D. Take the FortiWeb offline to apply the profile

  Correct Answer: B

• Question 24:

  When FortiWeb triggers a redirect action, which two HTTP codes does it send to the client to inform the browser of the new URL? (Choose two.)

  A. 403

  B. 302

  C. 301

  D. 404

  Correct Answer: BC

  Reference: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/302

• Question 25:

  Which is true about HTTPS on FortiWeb? (Choose three.)

  A. For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.

  B. After enabling HSTS, redirects to HTTPS are no longer necessary.

  C. In true transparent mode, the TLS session terminator is a protected web server.

  D. Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.

  E. In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.

  Correct Answer: ACE

• Question 26:

  What key factor must be considered when setting brute force rate limiting and blocking?

  A. A single client contacting multiple resources

  B. Multiple clients sharing a single Internet connection

  C. Multiple clients from geographically diverse locations

  D. Multiple clients connecting to multiple resources

  Correct Answer: B

  https://training.fortinet.com/course/view.php?id=3363

  What is one key factor that you must consider when setting brute force rate limiting and blocking? Multiple clients sharing a single Internet connection

• Question 27:

  What role does FortiWeb play in ensuring PCI DSS compliance?

  A. PCI specifically requires a WAF

  B. Provides credit card processing capabilities

  C. Provide ability to securely process cash transactions

  D. Provides load balancing between multiple web servers

  Correct Answer: A

  FortiWeb helps you meet all PCI requirements, but PCI now specifically recommends using a WAF, and developing remediations against the top 10 vulnerabilities, according to OWASP.

• Question 28:

  In Reverse proxy mode, how does FortiWeb handle traffic that does not match any defined policies?

  A. Non-matching traffic is allowed

  B. non-Matching traffic is held in buffer

  C. Non-matching traffic is Denied

  D. Non-matching traffic is rerouted to FortiGate

  Correct Answer: C

• Question 29:

  What role does FortiWeb play in ensuring PCI DSS compliance?

  A. It provides the ability to securely process cash transactions.

  B. It provides the required SQL server protection.

  C. It provides the WAF required by PCI.

  D. It provides credit card processing capabilities.

  Correct Answer: C

• Question 30:

  You've configured an authentication rule with delegation enabled on FortiWeb. What happens when a user tries to access the web application?

  A. FrotiWeb redirects users to a FortiAuthenticator page, then if the user authenticates successfully, FortiGate signals to FortiWeb to allow access to the web app

  B. ForitWeb redirects the user to the web app's authentication page

  C. FortiWeb forwards the HTTP challenge from the server to the client, then monitors the reply, allowing access if the user authenticates successfully

  D. FortiWeb replies with a HTTP challenge of behalf of the server, the if the user authenticates successfully, FortiWeb allows the request and also includes credentials in the request that it forwards to the web app

  Correct Answer: A