Download Free Fortinet NSE 6 - FortiWeb 6.4 NSE6_FWB-6.4 Dumps

Download Free Fortinet NSE 6 – FortiWeb 6.4 NSE6_FWB-6.4 Dumps

test2022-09-17T03:05:10+00:00

By test Fortinet NSE 6 - FortiWeb 6.4, NSE6_FWB-6.4 Dumps, NSE6_FWB-6.4 practice exam, NSE6_FWB-6.4 questions and answers 0 Comments

It is best to challenge and develop your knowledge in order to pass the Fortinet NSE 6 – FortiWeb 6.4 NSE6_FWB-6.4 test. We recommend practicing with FreeTestShare NSE6_FWB-6.4 Dumps to test your knowledge and identify areas for development in an actual exam environment. These NSE6_FWB-6.4 Dumps can help you clear your doubts and prepare for the exam! The most recent NSE6_FWB-6.4 Dumps are based on the exam objectives and are intended to assist you in passing the Fortinet NSE 6 – FortiWeb 6.4 exam.

Try the NSE6_FWB-6.4 practice exam below to assess your preparation!

Page 1 of 2

1. In Reverse proxy mode, how does FortiWeb handle traffic that does not match any defined policies?

Non-matching traffic is allowed

non-Matching traffic is held in buffer

Non-matching traffic is Denied

Non-matching traffic is rerouted to FortiGate

2. You’ve configured an authentication rule with delegation enabled on FortiWeb.

What happens when a user tries to access the web application?

FrotiWeb redirects users to a FortiAuthenticator page, then if the user authenticates successfully, FortiGate signals to FortiWeb to allow access to the web app

ForitWeb redirects the user to the web app’s authentication page

FortiWeb forwards the HTTP challenge from the server to the client, then monitors the reply, allowing access if the user authenticates successfully

FortiWeb replies with a HTTP challenge of behalf of the server, the if the user authenticates successfully, FortiWeb allows the request and also includes credentials in the request that it forwards to the web app

3. Refer to the exhibit.

Many legitimate users are being identified as bots. FortiWeb bot detection has been configured with the settings shown in the exhibit. The FortiWeb administrator has already verified that the current model is accurate.

What can the administrator do to fix this problem, making sure that real bots are not allowed through FortiWeb?

Change Model Type to Strict

Change Action under Action Settings to Alert

Disable Dynamically Update Model

Enable Bot Confirmation

4. Review the following configuration:

What is the expected result of this configuration setting?

When machine learning (ML) is in its collecting phase, FortiWeb will accept an unlimited number of samples from the same source IP address.

When machine learning (ML) is in its running phase, FortiWeb will accept an unlimited number of samples from the same source IP address.

When machine learning (ML) is in its collecting phase, FortiWeb will not accept any samples from any source IP addresses.

When machine learning (ML) is in its running phase, FortiWeb will accept a set number of samples from the same source IP address.

5. Which of the following is true about Local User Accounts?

Must be assigned regardless of any other authentication

Can be used for Single Sign On

Can be used for site publishing

Best suited for large environments with many users

6. In which scenario might you want to use the compression feature on FortiWeb?

When you are serving many corporate road warriors using 4G tablets and phones

When you are offering a music streaming service

When you want to reduce buffering of video streams

Never, since most traffic today is already highly compressed

7. You are configuring FortiAnalyzer to store logs from FortiWeb.

Which is true?

FortiAnalyzer will store antivirus and DLP archives from FortiWeb.

You must enable ADOMs on FortiAnalyzer.

To store logs from FortiWeb 6.4, on FortiAnalyzer, you must select “FrotiWeb 6.1”.

FortiWeb will query FortiAnalyzer for reports, instead of generating them locally.

8. Refer to the exhibits.

FortiWeb is configured in reverse proxy mode and it is deployed downstream to FortiGate.

Based on the configuration shown in the exhibits, which of the following statements is true?

FortiGate should forward web traffic to the server pool IP addresses.

The configuration is incorrect. FortiWeb should always be located upstream to FortiGate.

You must disable the Preserve Client IP setting on FotriGate for this configuration to work.

FortiGate should forward web traffic to virtual server IP address.

9. When integrating FortiWeb and FortiAnalyzer, why is the selection for FortiWeb Version critical? (Choose two)

Defines Log file format

Defines communication protocol

Defines Database Schema

Defines Log storage location

10. Which is true about HTTPS on FortiWeb? (Choose three.)

For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.

After enabling HSTS, redirects to HTTPS are no longer necessary.

In true transparent mode, the TLS session terminator is a protected web server.

Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.

In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.

Page 2 of 2

11. The FortiWeb machine learning (ML) feature is a two-phase analysis mechanism.

Which two functions does the first layer perform? (Choose two.)

Determines whether an anomaly is a real attack or just a benign anomaly that should be ignored

Builds a threat model behind every parameter and HTTP method

Determines if a detected threat is a false-positive or not

Determines whether traffic is an anomaly, based on observed application traffic over time

12. How does FortiWeb protect against defacement attacks?

It keeps a complete backup of all files and the database.

It keeps hashes of files and periodically compares them to the server.

It keeps full copies of all files and directories.

It keeps a live duplicate of the database.

13. How does an ADOM differ from a VDOM?

ADOMs do not have virtual networking

ADOMs improve performance by offloading some functions.

ADOMs only affect specific functions, and do not provide full separation like VDOMs do.

Allows you to have 1 administrator for multiple tenants

14. FortiWeb offers the same load balancing algorithms as FortiGate.

Which two Layer 7 switch methods does FortiWeb also offer? (Choose two.)

Round robin

HTTP session-based round robin

HTTP user-based round robin

HTTP content routes