Full NSE6_FWB-6.0 Practice Test and 30 unique questions with explanations waiting just for you!
Fortinet Certification Dumps NSE6_FWB-6.0 Exam for Full Questions - Exam Study Guide
NEW QUESTION 18
An e-commerce web app is used by small businesses. Clients often access it from offices behind a router, where clients are on an IPv4 privatenetwork LAN. You need to protect the web application from denial of service attacks that use request floods.
What FortiWeb feature should you configure?
- A. Configure FortiWeb to use "X-Forwarded-For:" headers to find each client's private network IP, and to block attacks using that.
- B. Enable "Shared IP" and configure the separate rate limits for requests from NATted source IPs.
- C. Enable SYN cookies.
- D. Configure a server policy that matches requests from shared Internet connections.
Answer: C
NEW QUESTION 19
You've configured an authentication rule with delegation enabled on FortiWeb.
Whathappens when a user tries to access the web application?
- A. ForitWeb redirects the user tothe web app's authentication page
- B. FrotiWeb redirects users to a FortiAuthenticator page, then if the user authenticates successfully, FortiGate signals to FortiWeb to allow access to the web app
- C. FortiWeb replies with a HTTP challenge of behalf of the server, theif the user authenticates successfully, FortiWeb allows the request and also includes credentials in the request that it forwards to the web app
- D. FortiWeb forwards the HTTP challenge from the server to the client, then monitors the reply, allowing access if the user authenticates successfully
Answer: B
NEW QUESTION 20
In Reverse proxy mode, how does FortiWeb handle traffic that does not match any defined policies?
- A. Non-matching traffic is Denied
- B. Non-matching traffic is rerouted to FortiGate
- C. Non-matching traffic is allowed
- D. non-Matching traffic is held in buffer
Answer: A
NEW QUESTION 21
When integrating FortiWeb and FortiAnalyzer, why is the selection for FortiWebVersion critical? (Choose two)
- A. Defines communication protocol
- B. Defines Log storage location
- C. Defines Database Schema
- D. Defines Log file format
Answer: B,D
NEW QUESTION 22
Under which circumstances does FortiWeb use its own certificates? (Choose Two)
- A. HTTPS to FortiGate
- B. Secondary HTTPS connection to server where FortiWeb acts as a client
- C. HTTPS access to GUI
- D. HTTPS to clients
Answer: B,C
NEW QUESTION 23
What is one of the key benefits of the FortiGuard IP Reputation feature?
- A. Provides a Document of IP addresses that are suspect, so that administrators can manually update their blacklists
- B. FortiGuard maintains a list of public IPs with a bad reputation for participating in attacks.
- C. It maintains a list of private IP addresses
- D. It is updated once per year
Answer: B
NEW QUESTION 24
What can an administrator do if a client has been incorrectly Period Blocked?
- A. Nothing, it is not possible to override a Period Block
- B. Manually release the IP from thetemporary Blacklist
- C. Force a new IP address to the client.
- D. Disconnect the client from the network
Answer: B
NEW QUESTION 25
Which of the following is true about Local User Accounts?
- A. Must be assigned regardless of any other authentication
- B. Can be used for site publishing
- C. Best suited for large environments with many users
- D. Can be used for Single Sign On
Answer: A
NEW QUESTION 26
How does your FortiWeb configuration differ if the FortiWeb is upstream of the SNAT device instead of downstream of the SNAT device?
- A. You must enable "Add" X-Forwarded-For: instead of the "Use" X-Forwarded-For: option.
- B. No special configuration required
- C. FortiWeb must be set for Transparent Mode
- D. You must enable the "Use" X-Forwarded-For: option.
Answer: D
NEW QUESTION 27
What role does FortiWeb play in ensuring PCI DSScompliance?
- A. Provide ability to securely process cash transactions
- B. Provides credit card processing capabilities
- C. PCI specifically requires a WAF
- D. Provides load balancing between multiple web servers
Answer: B
NEW QUESTION 28
Reverse-proxy mode is best suited for use in which type of environment?
- A. Flexible environments where you can easily change the IP addressing scheme
- B. Small Office/Home Office environments
- C. New networks where infrastructure is not yet defined
- D. Environments where you cannot change your IP addressing scheme
Answer: D
NEW QUESTION 29
Which operationmode does not require additional configuration in order to allow FTP traffic to your web server?
- A. Transparent Inspection
- B. Offline Protection
- C. Reverse-Proxy
- D. True Transparent Proxy
Answer: A
NEW QUESTION 30
......
Authentic Best resources for NSE6_FWB-6.0 Online Practice Exam: https://www.validbraindumps.com/NSE6_FWB-6.0-exam-prep.html