2023 Easy Success Fortinet NSE6_FWB-6.4 Exam in First Try [Q31-Q51]

Rate this post

2023 Easy Success Fortinet NSE6_FWB-6.4 Exam in First Try

Best NSE6_FWB-6.4 Exam Dumps for the Preparation of Latest Exam Questions

Fortinet NSE6_FWB-6.4 certification exam is designed for IT professionals who are responsible for managing the security of web applications in their organization. It is ideal for network administrators, security professionals, system engineers, and IT managers who want to gain expertise in Fortinet FortiWeb 6.4 and enhance their career prospects.

NO.31 You are using HTTP content routing on FortiWeb. Requests for web app A should be forwarded to a cluster of web servers which all host the same web app. Requests for web app B should be forwarded to a different, single web server.
Which is true about the solution?

Static or policy-based routes are not required.

To achieve HTTP content routing, you must chain policies: the first policy accepts all traffic, and forwards requests for web app A to the virtual server for policy A. It also forwards requests for web app B to the virtual server for policy B. Policy A and Policy B apply their app-specific protection profiles, and then distribute that app’s traffic among all members of the server farm.

You must put the single web server into a server pool in order to use it with HTTP content routing.

The server policy applies the same protection profile to all its protected web apps.

NO.32 When integrating FortiWeb and FortiAnalyzer, why is the selection for FortiWeb Version critical? (Choose two)

Defines Log file format

Defines communication protocol

Defines Database Schema

Defines Log storage location

NO.33 What role does FortiWeb play in ensuring PCI DSS compliance?

PCI specifically requires a WAF

Provides credit card processing capabilities

Provide ability to securely process cash transactions

Provides load balancing between multiple web servers

Explanation
FortiWeb helps you meet all PCI requirements, but PCI now specifically recommends using a WAF, and developing remediations against the top 10 vulnerabilities, according to OWASP.

NO.34 Which statement about local user accounts is true?

They are best suited for large environments with many users.

They cannot be used for site publishing.

They must be assigned, regardless of any other authentication.

They can be used for SSO.

NO.35 Refer to the exhibit.

FortiADC is applying SNAT to all inbound traffic going to the servers. When an attack occurs, FortiWeb blocks traffic based on the 192.0.2.1 source IP address, which belongs to FortiADC. The setup is breaking all connectivity and genuine clients are not able to access the servers.
What must the administrator do to avoid this problem? (Choose two.)

Enable the Use X-Forwarded-For setting on FortiWeb.

No Special configuration is required; connectivity will be re-established after the set timeout.

Place FortiWeb in front of FortiADC.

Enable the Add X-Forwarded-For setting on FortiWeb.

Explanation
Configure your load balancer to insert or append to an X-Forwarded-For:, X-Real-IP:, or other HTTP X-header. Also configure FortiWeb to find the original attacker’s or client’s IP address in that HTTP header

NO.36 When is it possible to use a self-signed certificate, rather than one purchased from a commercial certificate authority?

If you are a small business or home office

If you are an enterprise whose employees use only mobile devices

If you are an enterprise whose resources do not need security

If you are an enterprise whose computers all trust your active directory or other CA server

NO.37 How does offloading compression to FortiWeb benefit your network?

free up resources on the database server

Free up resources on the web server

reduces file size on the client’s storage

free up resources on the FortiGate

NO.38 Refer to the exhibit.

Based on the configuration, what would happen if this FortiWeb were to lose power? (Choose two.)

Traffic that passes between port5 and port6 will be inspected.

Traffic will be interrupted between port3 and port4.

All traffic will be interrupted.

Traffic will pass between port5 and port6 uninspected.

NO.39 When generating a protection configuration from an auto learning report what critical step must you do before generating the final protection configuration?

Restart the FortiWeb to clear the caches

Drill down in the report to correct any false positives.

Activate the report to create t profile

Take the FortiWeb offline to apply the profile

NO.40 In which operation mode(s) can FortiWeb modify HTTP packets? (Choose two.)

Transparent Inspection

Offline protection

True transparent proxy

Reverse proxy

NO.41 What is one of the key benefits of the FortiGuard IP reputation feature?

It maintains a list of private IP addresses.

It provides a document of IP addresses that are suspect, so that administrators can manually update their blacklists.

It is updated once per year.

It maintains a list of public IPs with a bad reputation for participating in attacks.

Explanation
FortiGuard IP Reputation service assigns a poor reputation, including virus-infected clients and malicious spiders/crawlers.

NO.42 When viewing the attack logs on FortiWeb, which client IP address is shown when you are using XFF header rules?

FortiGate public IP

FortiWeb IP

FortiGate local IP

Client real IP

Explanation
When an XFF header reaches Alteon from a client, Alteon removes all the content from the header and injects the client IP address. Alteon then forwards the header to the server.

NO.43 Which of the following would be a reason for implementing rewrites?

Page has been moved to a new URL

Page has been moved to a new IP address

Replace vulnerable functions.

Send connection to secure channel

NO.44 Refer to the exhibit.

Many legitimate users are being identified as bots. FortiWeb bot detection has been configured with the settings shown in the exhibit. The FortiWeb administrator has already verified that the current model is accurate.
What can the administrator do to fix this problem, making sure that real bots are not allowed through FortiWeb?

Change Model Type to Strict

Change Action under Action Settings to Alert

Disable Dynamically Update Model

Enable Bot Confirmation

Explanation
Bot Confirmation
If the number of anomalies from a user has reached the Anomaly Count, the system executes Bot Confirmation before taking actions.
The Bot Confirmation is to confirm if the user is indeed a bot. The system sends RBE (Real Browser Enforcement) JavaScript or CAPTCHA to the client to double check if it’s a real bot.

NO.45 How does your FortiWeb configuration differ if the FortiWeb is upstream of the SNAT device instead of downstream of the SNAT device?

You must enable the “Use” X-Forwarded-For: option.

FortiWeb must be set for Transparent Mode

No special configuration required

You must enable “Add” X-Forwarded-For: instead of the “Use” X-Forwarded-For: option.

NO.46 What capability can FortiWeb add to your Web App that your Web App may or may not already have?

Automatic backup and recovery

High Availability

HTTP/HTML Form Authentication

SSL Inspection

NO.47 Refer to the exhibit.

FortiWeb is configured to block traffic from Japan to your web application server. However, in the logs, the administrator is seeing traffic allowed from one particular IP address which is geo-located in Japan.
What can the administrator do to solve this problem? (Choose two.)

Manually update the geo-location IP addresses for Japan.

If the IP address is configured as a geo reputation exception, remove it.

Configure the IP address as a blacklisted IP address.

If the IP address is configured as an IP reputation exception, remove it.

NO.48 The FortiWeb machine learning (ML) feature is a two-phase analysis mechanism.
Which two functions does the first layer perform? (Choose two.)

Determines whether an anomaly is a real attack or just a benign anomaly that should be ignored

Builds a threat model behind every parameter and HTTP method

Determines if a detected threat is a false-positive or not

Determines whether traffic is an anomaly, based on observed application traffic over time

Explanation
The first layer uses the Hidden Markov Model (HMM) and monitors access to the application and collects data to build a mathematical model behind every parameter and HTTP method.

NO.49 What must you do with your FortiWeb logs to ensure PCI DSS compliance?

Store in an off-site location

Erase them every two weeks

Enable masking of sensitive data

Compress them into a .zip file format

NO.50 Which operation mode does not require additional configuration in order to allow FTP traffic to your web server?

Offline Protection

Transparent Inspection

True Transparent Proxy

Reverse-Proxy

NO.51 What key factor must be considered when setting brute force rate limiting and blocking?

A single client contacting multiple resources

Multiple clients sharing a single Internet connection

Multiple clients from geographically diverse locations

Multiple clients connecting to multiple resources

Explanation
https://training.fortinet.com/course/view.php?id=3363 What is one key factor that you must consider when setting brute force rate limiting and blocking? Multiple clients sharing a single Internet connection

Loading …

By passing the Fortinet NSE6_FWB-6.4 exam, candidates can demonstrate their expertise in web application security and their ability to effectively use FortiWeb 6.4 to protect web applications from a variety of threats. Fortinet NSE 6 – FortiWeb 6.4 certification can help network security professionals advance their careers and increase their earning potential, as well as help organizations ensure that their web applications are secure and protected against cyber threats.

NSE6_FWB-6.4 Study Material, Preparation Guide and PDF Download: https://www.examcost.com/NSE6_FWB-6.4-practice-exam.html