Latest [Oct 13, 2022] Real Fortinet NSE6_FWB-6.4 Exam Dumps Questions [Q24-Q41]

Latest [Oct 13, 2022] Real Fortinet NSE6_FWB-6.4 Exam Dumps Questions [Q24-Q41]

October 13, 2022 latestexam 0 Comments

Rate this post

Latest [Oct 13, 2022] Real Fortinet NSE6_FWB-6.4 Exam Dumps Questions

NSE6_FWB-6.4 Dumps To Pass NSE 6 Network Security Specialist Exam in One Day (Updated 58 Questions)

QUESTION 24
How does FortiWeb protect against defacement attacks?

It keeps a complete backup of all files and the database.

It keeps hashes of files and periodically compares them to the server.

It keeps full copies of all files and directories.

It keeps a live duplicate of the database.

Explanation
The anti-defacement feature examines a web site’s files for changes at specified time intervals. If it detects a change that could indicate a defacement attack, the FortiWeb appliance can notify you and quickly react by automatically restoring the web site contents to the previous backup.

QUESTION 25
In which operation mode(s) can FortiWeb modify HTTP packets? (Choose two.)

Transparent Inspection

Offline protection

True transparent proxy

Reverse proxy

QUESTION 26
Review the following configuration:

What is the expected result of this configuration setting?

When machine learning (ML) is in its collecting phase, FortiWeb will accept an unlimited number of samples from the same source IP address.

When machine learning (ML) is in its running phase, FortiWeb will accept an unlimited number of samples from the same source IP address.

When machine learning (ML) is in its collecting phase, FortiWeb will not accept any samples from any source IP addresses.

When machine learning (ML) is in its running phase, FortiWeb will accept a set number of samples from the same source IP address.

QUESTION 27
What benefit does Auto Learning provide?

Automatically identifies and blocks suspicious IPs

FortiWeb scans all traffic without taking action and makes recommendations on rules

Automatically builds rules sets

Automatically blocks all detected threats

QUESTION 28
Under what circumstances would you want to use the temporary uncompress feature of FortiWeb?

In the case of compression being done on the FortiWeb, to inspect the content of the compressed file

In the case of the file being a .MP3 music file

In the case of compression being done on the web server, to inspect the content of the compressed file.

In the case of the file being an .MP4 video

QUESTION 29
FortiWeb offers the same load balancing algorithms as FortiGate.
Which two Layer 7 switch methods does FortiWeb also offer? (Choose two.)

Round robin

HTTP session-based round robin

HTTP user-based round robin

HTTP content routes

QUESTION 30
Refer to the exhibit.

Based on the configuration, what would happen if this FortiWeb were to lose power? (Choose two.)

Traffic that passes between port5 and port6 will be inspected.

Traffic will be interrupted between port3 and port4.

All traffic will be interrupted.

Traffic will pass between port5 and port6 uninspected.

QUESTION 31
Which is true about HTTPS on FortiWeb? (Choose three.)

For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.

After enabling HSTS, redirects to HTTPS are no longer necessary.

In true transparent mode, the TLS session terminator is a protected web server.

Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.

In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.

QUESTION 32
You are using HTTP content routing on FortiWeb. You want requests for web application A to be forwarded to a cluster of web servers, which all host the same web application. You want requests for web application B to be forwarded to a different, single web server.
Which statement about this solution is true?

The server policy applies the same protection profile to all of its protected web applications.

You must put the single web server in to a server pool, in order to use it with HTTP content routing.

You must chain policies so that requests for web application A go to the virtual server for policy A, and requests for web application B go to the virtual server for policy B.

Static or policy-based routes are not required.

QUESTION 33
What role does FortiWeb play in ensuring PCI DSS compliance?

It provides the ability to securely process cash transactions.

It provides the required SQL server protection.

It provides the WAF required by PCI.

It provides credit card processing capabilities.

QUESTION 34
When is it possible to use a self-signed certificate, rather than one purchased from a commercial certificate authority?

If you are a small business or home office

If you are an enterprise whose employees use only mobile devices

If you are an enterprise whose resources do not need security

If you are an enterprise whose computers all trust your active directory or other CA server

QUESTION 35
Which of the following is true about Local User Accounts?

Must be assigned regardless of any other authentication

Can be used for Single Sign On

Can be used for site publishing

Best suited for large environments with many users

QUESTION 36
When viewing the attack logs on FortiWeb, which client IP address is shown when you are using XFF header rules?

FortiGate public IP

FortiWeb IP

FortiGate local IP

Client real IP

Explanation
When an XFF header reaches Alteon from a client, Alteon removes all the content from the header and injects the client IP address. Alteon then forwards the header to the server.

QUESTION 37
The FortiWeb machine learning (ML) feature is a two-phase analysis mechanism.
Which two functions does the first layer perform? (Choose two.)

Determines whether an anomaly is a real attack or just a benign anomaly that should be ignored

Builds a threat model behind every parameter and HTTP method

Determines if a detected threat is a false-positive or not

Determines whether traffic is an anomaly, based on observed application traffic over time

Explanation
The first layer uses the Hidden Markov Model (HMM) and monitors access to the application and collects data to build a mathematical model behind every parameter and HTTP method.

QUESTION 38
When the FortiWeb is configured in Reverse Proxy mode and the FortiGate is configured as an SNAT device, what IP address will the FortiGate’s Real Server configuration point at?

Virtual Server IP on the FortiGate

Server’s real IP

FortiWeb’s real IP

IP Address of the Virtual Server on the FortiWeb

QUESTION 39
You are deploying FortiWeb 6.4 in an Amazon Web Services cloud. Which 2 lines of this initial setup via CLI are incorrect? (Choose two.)

QUESTION 40
You are configuring FortiAnalyzer to store logs from FortiWeb.
Which is true?

FortiAnalyzer will store antivirus and DLP archives from FortiWeb.

You must enable ADOMs on FortiAnalyzer.

To store logs from FortiWeb 6.4, on FortiAnalyzer, you must select “FrotiWeb 6.1”.

FortiWeb will query FortiAnalyzer for reports, instead of generating them locally.

QUESTION 41
A client is trying to start a session from a page that would normally be accessible only after the client has logged in.
When a start page rule detects the invalid session access, what can FortiWeb do? (Choose three.)

Display an access policy message, then allow the client to continue

Redirect the client to the login page

Allow the page access, but log the violation

Prompt the client to authenticate

Reply with a 403 Forbidden HTTP error

Loading …

Fortinet NSE6_FWB-6.4 Exam Syllabus Topics:

Topic	Details
Topic 1	Troubleshoot threat detection and mitigation related issues Identify FortiWeb deployment requirements
Topic 2	Encryption, Authentication, and Compliance Mitigate web application vulnerabilities
Topic 3	Configure various access control and tracking methods Troubleshoot deployment and system related issues
Topic 4	Configure server pools, policies, and protected hostnames Trobleshoot encryption and authentication related issues

NSE6_FWB-6.4 Exam Brain Dumps – Study Notes and Theory: https://www.latestcram.com/NSE6_FWB-6.4-exam-cram-questions.html

Related Certifications

C_ARCON_2208 (1)
P-SECAUTH-21 (2)
E-ACTCLD-23 (1)
C-BW4H-2404 (1)
C-THR82-2305 (1)
C_THR97_2305 (2)
C_TS4C_2023 (1)
C_THR82_2211 (1)
C-TS4C-2022 (1)
C-ARSCC-2202 (1)

Free Cram & Latest Exams Dumps