Get Real NSE6_FWB-6.4 Quesions Pass Fortinet Certification Exams Easily [Q23-Q38]

4/5 - (1 vote)

Get Real NSE6_FWB-6.4 Quesions Pass Fortinet Certification Exams Easily

NSE6_FWB-6.4 Dumps are Available for Instant Access

The Fortinet NSE6_FWB-6.4 exam covers various topics, including web application security, FortiWeb deployment, management, and troubleshooting. The exam consists of 60 multiple-choice questions that need to be completed in 120 minutes. To pass the exam, candidates must score at least 70%.

NO.23 When integrating FortiWeb and FortiAnalyzer, why is the selection for FortiWeb Version critical? (Choose two)

Defines Log file format

Defines communication protocol

Defines Database Schema

Defines Log storage location

NO.24 In which operation mode(s) can FortiWeb modify HTTP packets? (Choose two.)

Transparent Inspection

Offline protection

True transparent proxy

Reverse proxy

NO.25 Which of the following would be a reason for implementing rewrites?

Page has been moved to a new URL

Page has been moved to a new IP address

Replace vulnerable functions.

Send connection to secure channel

NO.26 When FortiWeb triggers a redirect action, which two HTTP codes does it send to the client to inform the browser of the new URL? (Choose two.)

403

302

301

404

NO.27 You’ve configured an authentication rule with delegation enabled on FortiWeb.
What happens when a user tries to access the web application?

FrotiWeb redirects users to a FortiAuthenticator page, then if the user authenticates successfully, FortiGate signals to FortiWeb to allow access to the web app

ForitWeb redirects the user to the web app’s authentication page

FortiWeb forwards the HTTP challenge from the server to the client, then monitors the reply, allowing access if the user authenticates successfully

FortiWeb replies with a HTTP challenge of behalf of the server, the if the user authenticates successfully, FortiWeb allows the request and also includes credentials in the request that it forwards to the web app

NO.28 An e-commerce web app is used by small businesses. Clients often access it from offices behind a router, where clients are on an IPv4 private network LAN. You need to protect the web application from denial of service attacks that use request floods.
What FortiWeb feature should you configure?

Enable “Shared IP” and configure the separate rate limits for requests from NATted source IPs.

Configure FortiWeb to use “X-Forwarded-For:” headers to find each client’s private network IP, and to block attacks using that.

Enable SYN cookies.

Configure a server policy that matches requests from shared Internet connections.

NO.29 Which statement about local user accounts is true?

They are best suited for large environments with many users.

They cannot be used for site publishing.

They must be assigned, regardless of any other authentication.

They can be used for SSO.

NO.30 Refer to the exhibit.

There is only one administrator account configured on FortiWeb. What must an administrator do to restrict any brute force attacks that attempt to gain access to the FortiWeb management GUI?

Delete the built-in administrator user and create a new one.

Configure IPv4 Trusted Host # 3 with a specific IP address.

The configuration changes must be made on the upstream device.

Change the Access Profile to Read_Only.

NO.31 Refer to the exhibit.

FortiADC is applying SNAT to all inbound traffic going to the servers. When an attack occurs, FortiWeb blocks traffic based on the 192.0.2.1 source IP address, which belongs to FortiADC. The setup is breaking all connectivity and genuine clients are not able to access the servers.
What must the administrator do to avoid this problem? (Choose two.)

Enable the Use X-Forwarded-For setting on FortiWeb.

No Special configuration is required; connectivity will be re-established after the set timeout.

Place FortiWeb in front of FortiADC.

Enable the Add X-Forwarded-For setting on FortiWeb.

Explanation
Configure your load balancer to insert or append to an X-Forwarded-For:, X-Real-IP:, or other HTTP X-header. Also configure FortiWeb to find the original attacker’s or client’s IP address in that HTTP header

NO.32 You are using HTTP content routing on FortiWeb. You want requests for web application A to be forwarded to a cluster of web servers, which all host the same web application. You want requests for web application B to be forwarded to a different, single web server.
Which statement about this solution is true?

The server policy applies the same protection profile to all of its protected web applications.

You must put the single web server in to a server pool, in order to use it with HTTP content routing.

You must chain policies so that requests for web application A go to the virtual server for policy A, and requests for web application B go to the virtual server for policy B.

Static or policy-based routes are not required.

NO.33 Which of the following is true about Local User Accounts?

Must be assigned regardless of any other authentication

Can be used for Single Sign On

Can be used for site publishing

Best suited for large environments with many users

NO.34 When viewing the attack logs on FortiWeb, which client IP address is shown when you are using XFF header rules?

FortiGate public IP

FortiWeb IP

FortiGate local IP

Client real IP

Explanation
When an XFF header reaches Alteon from a client, Alteon removes all the content from the header and injects the client IP address. Alteon then forwards the header to the server.

NO.35 What is one of the key benefits of the FortiGuard IP reputation feature?

It maintains a list of private IP addresses.

It provides a document of IP addresses that are suspect, so that administrators can manually update their blacklists.

It is updated once per year.

It maintains a list of public IPs with a bad reputation for participating in attacks.

Explanation
FortiGuard IP Reputation service assigns a poor reputation, including virus-infected clients and malicious spiders/crawlers.

NO.36 True transparent proxy mode is best suited for use in which type of environment?

New networks where infrastructure is not yet defined

Flexible environments where you can easily change the IP addressing scheme

Small office to home office environments

Environments where you cannot change the IP addressing scheme

Explanation
“Because blocking is not guaranteed to succeed in offline mode, this mode is best used during the evaluation and planning phase, early in implementation. Reverse proxy is the most popular operating mode. It can rewrite URLs, offload TLS, load balance, and apply NAT. For very large MSSP, true transparent mode has a significant advantage. You can drop it in without changing any schemes of limited IPv4 space-in transparent mode, you don’t need to give IP addresses to the network interfaces on FortiWeb.”

NO.37 Which algorithm is used to build mathematical models for bot detection?

HCM

SVN

SVM

HMM

Explanation
FortiWeb uses SVM (Support Vector Machine) algorithm to build up the bot detection model

NO.38 How does your FortiWeb configuration differ if the FortiWeb is upstream of the SNAT device instead of downstream of the SNAT device?

You must enable the “Use” X-Forwarded-For: option.

FortiWeb must be set for Transparent Mode

No special configuration required

You must enable “Add” X-Forwarded-For: instead of the “Use” X-Forwarded-For: option.

Loading …