Top Fortinet NSE6_FWB-6.0 Courses Online - Updated [Dec-2021]
NSE6_FWB-6.0 Practice Dumps - Verified By Exam4Free Updated 30 Questions
NEW QUESTION 15
In which operation mode(s) can FortiWeb modify HTTP packets? (Choose two.)
- A. Transparent Inspection
- B. True transparent proxy
- C. Reverse proxy
- D. Offlineprotection
Answer: C
NEW QUESTION 16
An e-commerce web app is used by small businesses. Clients often access it from offices behind a router, where clients are on an IPv4 privatenetwork LAN. You need to protect the web application from denial of service attacks that use request floods.
What FortiWeb feature should you configure?
- A. Enable SYN cookies.
- B. Configure FortiWeb to use "X-Forwarded-For:" headers to find each client's private network IP, and to block attacks using that.
- C. Configure a server policy that matches requests from shared Internet connections.
- D. Enable "Shared IP" and configure the separate rate limits for requests from NATted source IPs.
Answer: A
NEW QUESTION 17
You are configuring FortiAnalyzer to store logs from FortiWeb.
Which is true?
- A. You mustenable ADOMs on FortiAnalyzer.
- B. FortiWeb will query FortiAnalyzer for reports, instead of generating them locally.
- C. To store logs from FortiWeb6.0, on FortiAnalyzer, you must select "FrotiWeb 5.4".
- D. FortiAnalyzer will store antivirus and DLP archives from FortiWeb.
Answer: A
NEW QUESTION 18
Which operationmode does not require additional configuration in order to allow FTP traffic to your web server?
- A. Reverse-Proxy
- B. Offline Protection
- C. Transparent Inspection
- D. True Transparent Proxy
Answer: C
NEW QUESTION 19
What role does FortiWeb play in ensuring PCI DSScompliance?
- A. PCI specifically requires a WAF
- B. Provide ability to securely process cash transactions
- C. Provides credit card processing capabilities
- D. Provides load balancing between multiple web servers
Answer: C
NEW QUESTION 20
What is one of the key benefits of the FortiGuard IP Reputation feature?
- A. Provides a Document of IP addresses that are suspect, so that administrators can manually update their blacklists
- B. It is updated once per year
- C. FortiGuard maintains a list of public IPs with a bad reputation for participating in attacks.
- D. It maintains a list of private IP addresses
Answer: C
NEW QUESTION 21
What capability can FortiWeb add to your Web App that your Web App may or may not already have?
- A. SSL Inspection
- B. Automatic backup and recovery
- C. HTTP/HTML Form Authentication
- D. High Availability
Answer: A
NEW QUESTION 22
How does an ADOM differ from a VDOM?
- A. ADOMs do not have virtual networking
- B. Allows you to have 1 administrator for multiple tenants
- C. ADOMs only affect specific functions, and do not provide full separation like VDOMs do.
- D. ADOMs improve performance by offloading some functions.
Answer: B
NEW QUESTION 23
Which of the following FortiWeb features is part of the mitigation tools against OWASP A4 threats?
- A. Sensitive info masking
- B. Brute Force blocking
- C. Poison Cookie detection
- D. Session Management
Answer: D
NEW QUESTION 24
What can an administrator do if a client has been incorrectly Period Blocked?
- A. Manually release the IP from thetemporary Blacklist
- B. Force a new IP address to the client.
- C. Nothing, it is not possible to override a Period Block
- D. Disconnect the client from the network
Answer: A
NEW QUESTION 25
What benefit does Auto Learning provide?
- A. Automatically builds rules sets
- B. FortiWeb scans all traffic without taking action and makes recommendations on rules
- C. Automatically blocks all detected threats
- D. Automatically identifies and blocks suspicious IPs
Answer: A
NEW QUESTION 26
When theFortiWeb is configured in Reverse Proxy mode and the FortiGate is configured as an SNAT device, what IP address will the FortiGate's Real Server configuration point at?
- A. IPAddress of the Virtual Server on the FortiWeb
- B. Virtual Server IP on the FortiGate
- C. Server's real IP
- D. FortiWeb's real IP
Answer: B
NEW QUESTION 27
......
New (2021) Fortinet NSE6_FWB-6.0 Exam Dumps: https://www.exam4free.com/NSE6_FWB-6.0-valid-dumps.html
