[Nov 23, 2022] New Updated NSE6_FWB-6.4 Exam Questions 2022 [Q10-Q27]

5/5 - (1 vote)

[Nov 23, 2022] New Updated NSE6_FWB-6.4 Exam Questions 2022

Updated Free Fortinet NSE6_FWB-6.4 Test Engine Questions with 58 Q&As

Q10. Under what circumstances would you want to use the temporary uncompress feature of FortiWeb?

In the case of compression being done on the FortiWeb, to inspect the content of the compressed file

In the case of the file being a .MP3 music file

In the case of compression being done on the web server, to inspect the content of the compressed file.

In the case of the file being an .MP4 video

Q11. In which two operating modes can FortiWeb modify HTTP packets? (Choose two.)

Offline protection

Transparent inspection

True transparent proxy

Reverse proxy

Q12. Refer to the exhibits.

FortiWeb is configured in reverse proxy mode and it is deployed downstream to FortiGate. Based on the configuration shown in the exhibits, which of the following statements is true?

FortiGate should forward web traffic to the server pool IP addresses.

The configuration is incorrect. FortiWeb should always be located upstream to FortiGate.

You must disable the Preserve Client IP setting on FotriGate for this configuration to work.

FortiGate should forward web traffic to virtual server IP address.

Q13. How does your FortiWeb configuration differ if the FortiWeb is upstream of the SNAT device instead of downstream of the SNAT device?

You must enable the “Use” X-Forwarded-For: option.

FortiWeb must be set for Transparent Mode

No special configuration required

You must enable “Add” X-Forwarded-For: instead of the “Use” X-Forwarded-For: option.

Q14. Which implementation is best suited for a deployment that must meet compliance criteria?

SSL Inspection with FortiWeb in Transparency mode

SSL Offloading with FortiWeb in reverse proxy mode

SSL Inspection with FrotiWeb in Reverse Proxy mode

SSL Offloading with FortiWeb in Transparency Mode

Q15. Which
regex expression is the correct format for redirecting the URL http://www.example.com?

www.example.com

wwwexamplecom

www/.example/.com

Explanation
\1://www.company.com/\2/\3

Q16. What capability can FortiWeb add to your Web App that your Web App may or may not already have?

Automatic backup and recovery

High Availability

HTTP/HTML Form Authentication

SSL Inspection

Q17. Which algorithm is used to build mathematical models for bot detection?

HCM

SVN

SVM

HMM

Explanation
FortiWeb uses SVM (Support Vector Machine) algorithm to build up the bot detection model

Q18. Which three statements about HTTPS on FortiWeb are true? (Choose three.)

For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.

After enabling HSTS, redirects to HTTPS are no longer necessary.

In true transparent mode, the TLS session terminator is a protected web server.

Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.

In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.

Q19. An e-commerce web app is used by small businesses. Clients often access it from offices behind a router, where clients are on an IPv4 private network LAN. You need to protect the web application from denial of service attacks that use request floods.
What FortiWeb feature should you configure?

Enable “Shared IP” and configure the separate rate limits for requests from NATted source IPs.

Configure FortiWeb to use “X-Forwarded-For:” headers to find each client’s private network IP, and to block attacks using that.

Enable SYN cookies.

Configure a server policy that matches requests from shared Internet connections.

Q20. When is it possible to use a self-signed certificate, rather than one purchased from a commercial certificate authority?

If you are a small business or home office

If you are an enterprise whose employees use only mobile devices

If you are an enterprise whose resources do not need security

If you are an enterprise whose computers all trust your active directory or other CA server

Q21. What role does FortiWeb play in ensuring PCI DSS compliance?

It provides the ability to securely process cash transactions.

It provides the required SQL server protection.

It provides the WAF required by PCI.

It provides credit card processing capabilities.

Q22. What benefit does Auto Learning provide?

Automatically identifies and blocks suspicious IPs

FortiWeb scans all traffic without taking action and makes recommendations on rules

Automatically builds rules sets

Automatically blocks all detected threats

Q23. When integrating FortiWeb and FortiAnalyzer, why is the selection for FortiWeb Version critical? (Choose two)

Defines Log file format

Defines communication protocol

Defines Database Schema

Defines Log storage location

Q24. Refer to the exhibit.

FortiWeb is configured to block traffic from Japan to your web application server. However, in the logs, the administrator is seeing traffic allowed from one particular IP address which is geo-located in Japan.
What can the administrator do to solve this problem? (Choose two.)