Fortinet Fortinet Certifications NSE6_FWB-6.4 Questions & Answers

• Question 51:

  When viewing the attack logs on FortiWeb, which client IP address is shown when you are using XFF header rules?

  A. FortiGate public IP

  B. FortiWeb IP

  C. FortiGate local IP

  D. Client real IP

  Correct Answer: D

  When an XFF header reaches Alteon from a client, Alteon removes all the content from the header and injects the client IP address. Alteon then forwards the header to the server.

  Reference:

  https://support.radware.com/app/answers/answer_view/a_id/20925/~/modifying-the-client-ip-address-in-the-xff-header-using-httpmod

• Question 52:

  Which implementation is best suited for a deployment that must meet compliance criteria?

  A. SSL Inspection with FortiWeb in Transparency mode

  B. SSL Offloading with FortiWeb in reverse proxy mode

  C. SSL Inspection with FrotiWeb in Reverse Proxy mode

  D. SSL Offloading with FortiWeb in Transparency Mode

  Correct Answer: C

• Question 53:

  Which statement about local user accounts is true?

  A. They are best suited for large environments with many users.

  B. They cannot be used for site publishing.

  C. They must be assigned, regardless of any other authentication.

  D. They can be used for SSO.

  Correct Answer: B

• Question 54:

  How does an ADOM differ from a VDOM?

  A. ADOMs do not have virtual networking

  B. ADOMs improve performance by offloading some functions.

  C. ADOMs only affect specific functions, and do not provide full separation like VDOMs do.

  D. Allows you to have 1 administrator for multiple tenants

  Correct Answer: A

• Question 55:

  What capability can FortiWeb add to your Web App that your Web App may or may not already have?

  A. Automatic backup and recovery

  B. High Availability

  C. HTTP/HTML Form Authentication

  D. SSL Inspection

  Correct Answer: C

• Question 56:

  Review the following configuration:

  

  What is the expected result of this configuration setting?

  A. When machine learning (ML) is in its collecting phase, FortiWeb will accept an unlimited number of samples from the same source IP address.

  B. When machine learning (ML) is in its running phase, FortiWeb will accept an unlimited number of samples from the same source IP address.

  C. When machine learning (ML) is in its collecting phase, FortiWeb will not accept any samples from any source IP addresses.

  D. When machine learning (ML) is in its running phase, FortiWeb will accept a set number of samples from the same source IP address.

  Correct Answer: A