[Q28-Q45] Verified NSE6_FWB-6.4 dumps Q&As – Pass Guarantee or Full Refund [Apr-2023]

QUESTION 28
Refer to the exhibit.

FortiADC is applying SNAT to all inbound traffic going to the servers. When an attack occurs, FortiWeb blocks traffic based on the 192.0.2.1 source IP address, which belongs to FortiADC. The setup is breaking all connectivity and genuine clients are not able to access the servers.
What must the administrator do to avoid this problem? (Choose two.)

Enable the Use X-Forwarded-For setting on FortiWeb.

No Special configuration is required; connectivity will be re-established after the set timeout.

Place FortiWeb in front of FortiADC.

Enable the Add X-Forwarded-For setting on FortiWeb.

QUESTION 29
Which two statements about running a vulnerability scan are true? (Choose two.)

You should run the vulnerability scan during a maintenance window.

You should run the vulnerability scan in a test environment.

Vulnerability scanning increases the load on FortiWeb, so it should be avoided.

You should run the vulnerability scan on a live website to get accurate results.

QUESTION 30
When generating a protection configuration from an auto learning report what critical step must you do before generating the final protection configuration?

Restart the FortiWeb to clear the caches

Drill down in the report to correct any false positives.

Activate the report to create t profile

Take the FortiWeb offline to apply the profile

QUESTION 31
Under which circumstances does FortiWeb use its own certificates? (Choose Two)

Secondary HTTPS connection to server where FortiWeb acts as a client

HTTPS to clients

HTTPS access to GUI

HTTPS to FortiGate

QUESTION 32
Which
regex expression is the correct format for redirecting the URL http://www.example.com?

www.example.com

wwwexamplecom

www/.example/.com

QUESTION 33
What capability can FortiWeb add to your Web App that your Web App may or may not already have?

Automatic backup and recovery

High Availability

HTTP/HTML Form Authentication

SSL Inspection

QUESTION 34
Review the following configuration:

What is the expected result of this configuration setting?

When machine learning (ML) is in its collecting phase, FortiWeb will accept an unlimited number of samples from the same source IP address.

When machine learning (ML) is in its running phase, FortiWeb will accept an unlimited number of samples from the same source IP address.

When machine learning (ML) is in its collecting phase, FortiWeb will not accept any samples from any source IP addresses.

When machine learning (ML) is in its running phase, FortiWeb will accept a set number of samples from the same source IP address.

QUESTION 35
What must you do with your FortiWeb logs to ensure PCI DSS compliance?

Store in an off-site location

Erase them every two weeks

Enable masking of sensitive data

Compress them into a .zip file format

QUESTION 36
How does FortiWeb protect against defacement attacks?

It keeps a complete backup of all files and the database.

It keeps hashes of files and periodically compares them to the server.

It keeps full copies of all files and directories.

It keeps a live duplicate of the database.

QUESTION 37
FortiWeb offers the same load balancing algorithms as FortiGate.
Which two Layer 7 switch methods does FortiWeb also offer? (Choose two.)

Round robin

HTTP session-based round robin

HTTP user-based round robin

HTTP content routes

QUESTION 38
A client is trying to start a session from a page that should normally be accessible only after they have logged in.
When a start page rule detects the invalid session access, what can FortiWeb do? (Choose three.)

Reply with a “403 Forbidden” HTTP error

Allow the page access, but log the violation

Automatically redirect the client to the login page

Display an access policy message, then allow the client to continue, redirecting them to their requested page

Prompt the client to authenticate

QUESTION 39
Which two statements about the anti-defacement feature on FortiWeb are true? (Choose two.)

Anti-defacement can redirect users to a backup web server, if it detects a change.

Anti-defacement downloads a copy of your website to RAM, in order to restore a clean image, if it detects defacement.

FortiWeb will only check to see if there are changes on the web server; it will not download the whole file each time.

Anti-defacement does not make a backup copy of your databases.

QUESTION 40
What role does FortiWeb play in ensuring PCI DSS compliance?

It provides the ability to securely process cash transactions.

It provides the required SQL server protection.

It provides the WAF required by PCI.

It provides credit card processing capabilities.

QUESTION 41
Which of the following is true about Local User Accounts?

Must be assigned regardless of any other authentication

Can be used for Single Sign On

Can be used for site publishing

Best suited for large environments with many users

QUESTION 42
When viewing the attack logs on FortiWeb, which client IP address is shown when you are using XFF header rules?

FortiGate public IP

FortiWeb IP

FortiGate local IP

Client real IP

QUESTION 43
Refer to the exhibit.

FortiWeb is configured to block traffic from Japan to your web application server. However, in the logs, the administrator is seeing traffic allowed from one particular IP address which is geo-located in Japan.
What can the administrator do to solve this problem? (Choose two.)

Manually update the geo-location IP addresses for Japan.

If the IP address is configured as a geo reputation exception, remove it.

Configure the IP address as a blacklisted IP address.

If the IP address is configured as an IP reputation exception, remove it.

QUESTION 44
Refer to the exhibit.

Based on the configuration, what would happen if this FortiWeb were to lose power? (Choose two.)

Traffic that passes between port5 and port6 will be inspected.

Traffic will be interrupted between port3 and port4.

All traffic will be interrupted.

Traffic will pass between port5 and port6 uninspected.

QUESTION 45
When the FortiWeb is configured in Reverse Proxy mode and the FortiGate is configured as an SNAT device, what IP address will the FortiGate’s Real Server configuration point at?

Virtual Server IP on the FortiGate

Server’s real IP

FortiWeb’s real IP

IP Address of the Virtual Server on the FortiWeb

[Q28-Q45] Verified NSE6_FWB-6.4 dumps Q&As – Pass Guarantee or Full Refund [Apr-2023]

Be the first to reply

Leave a Reply Cancel reply