Free Mar-2023 UPDATED Fortinet NSE6_FWB-6.4 Certification Exam Dumps is Online [Q12-Q31]

5/5 - (1 vote)

Free Mar-2023 UPDATED Fortinet NSE6_FWB-6.4 Certification Exam Dumps is Online

Fortinet Exam 2023 NSE6_FWB-6.4 Dumps Updated Questions

Fortinet NSE6_FWB-6.4 Exam Syllabus Topics:

Topic	Details
Topic 1	Configure various access control and tracking methods Troubleshoot deployment and system related issues
Topic 2	Configure HTTP content routing, rewriting, and redirection Mitigate attacks on authentication
Topic 3	Encryption, Authentication, and Compliance Mitigate web application vulnerabilities
Topic 4	Troublehsoot application delivery related issues Configure various threat mitigation features
Topic 5	Configure server pools, policies, and protected hostnames Trobleshoot encryption and authentication related issues
Topic 6	Configure machine learning and bot detection Configure SSL inspection and offloading
Topic 7	Troubleshoot threat detection and mitigation related issues Identify FortiWeb deployment requirements

Q12. When is it possible to use a self-signed certificate, rather than one purchased from a commercial certificate authority?

If you are a small business or home office

If you are an enterprise whose employees use only mobile devices

If you are an enterprise whose resources do not need security

If you are an enterprise whose computers all trust your active directory or other CA server

Q13. Which of the following FortiWeb features is part of the mitigation tools against OWASP A4 threats?

Sensitive info masking

Poison Cookie detection

Session Management

Brute Force blocking

Q14. When the FortiWeb is configured in Reverse Proxy mode and the FortiGate is configured as an SNAT device, what IP address will the FortiGate’s Real Server configuration point at?

Virtual Server IP on the FortiGate

Server’s real IP

FortiWeb’s real IP

IP Address of the Virtual Server on the FortiWeb

Q15. Review the following configuration:

What is the expected result of this configuration setting?

When machine learning (ML) is in its collecting phase, FortiWeb will accept an unlimited number of samples from the same source IP address.

When machine learning (ML) is in its running phase, FortiWeb will accept an unlimited number of samples from the same source IP address.

When machine learning (ML) is in its collecting phase, FortiWeb will not accept any samples from any source IP addresses.

When machine learning (ML) is in its running phase, FortiWeb will accept a set number of samples from the same source IP address.

Q16. When generating a protection configuration from an auto learning report what critical step must you do before generating the final protection configuration?

Restart the FortiWeb to clear the caches

Drill down in the report to correct any false positives.

Activate the report to create t profile

Take the FortiWeb offline to apply the profile

Q17. When integrating FortiWeb and FortiAnalyzer, why is the selection for FortiWeb Version critical? (Choose two)

Defines Log file format

Defines communication protocol

Defines Database Schema

Defines Log storage location

Q18. Which two statements about the anti-defacement feature on FortiWeb are true? (Choose two.)

Anti-defacement can redirect users to a backup web server, if it detects a change.

Anti-defacement downloads a copy of your website to RAM, in order to restore a clean image, if it detects defacement.

FortiWeb will only check to see if there are changes on the web server; it will not download the whole file each time.

Anti-defacement does not make a backup copy of your databases.

Explanation
Anti-defacement backs up web pages only, not databases.
If it detects any file changes, the FortiWeb appliance will download a new backup revision.

Q19. When FortiWeb triggers a redirect action, which two HTTP codes does it send to the client to inform the browser of the new URL? (Choose two.)

403

302

301

404

Q20. What benefit does Auto Learning provide?

Automatically identifies and blocks suspicious IPs

FortiWeb scans all traffic without taking action and makes recommendations on rules

Automatically builds rules sets

Automatically blocks all detected threats

Q21. Which algorithm is used to build mathematical models for bot detection?

HCM

SVN

SVM

HMM

Explanation
FortiWeb uses SVM (Support Vector Machine) algorithm to build up the bot detection model

Q22. Under what circumstances would you want to use the temporary uncompress feature of FortiWeb?

In the case of compression being done on the FortiWeb, to inspect the content of the compressed file

In the case of the file being a .MP3 music file

In the case of compression being done on the web server, to inspect the content of the compressed file.

In the case of the file being an .MP4 video

Q23. Which would be a reason to implement HTTP rewriting?

The original page has moved to a new URL

To replace a vulnerable function in the requested URL

To send the request to secure channel

The original page has moved to a new IP address

Explanation
Create a new URL rewriting rule.

Q24. In which operation mode(s) can FortiWeb modify HTTP packets? (Choose two.)

Transparent Inspection

Offline protection

True transparent proxy

Reverse proxy

Q25. True transparent proxy mode is best suited for use in which type of environment?

New networks where infrastructure is not yet defined

Flexible environments where you can easily change the IP addressing scheme

Small office to home office environments

Environments where you cannot change the IP addressing scheme

Explanation
“Because blocking is not guaranteed to succeed in offline mode, this mode is best used during the evaluation and planning phase, early in implementation. Reverse proxy is the most popular operating mode. It can rewrite URLs, offload TLS, load balance, and apply NAT. For very large MSSP, true transparent mode has a significant advantage. You can drop it in without changing any schemes of limited IPv4 space-in transparent mode, you don’t need to give IP addresses to the network interfaces on FortiWeb.”

Q26. Refer to the exhibit.

Many legitimate users are being identified as bots. FortiWeb bot detection has been configured with the settings shown in the exhibit. The FortiWeb administrator has already verified that the current model is accurate.
What can the administrator do to fix this problem, making sure that real bots are not allowed through FortiWeb?

Change Model Type to Strict

Change Action under Action Settings to Alert

Disable Dynamically Update Model

Enable Bot Confirmation

Explanation
Bot Confirmation
If the number of anomalies from a user has reached the Anomaly Count, the system executes Bot Confirmation before taking actions.
The Bot Confirmation is to confirm if the user is indeed a bot. The system sends RBE (Real Browser Enforcement) JavaScript or CAPTCHA to the client to double check if it’s a real bot.

Q27. You are using HTTP content routing on FortiWeb. You want requests for web application A to be forwarded to a cluster of web servers, which all host the same web application. You want requests for web application B to be forwarded to a different, single web server.
Which statement about this solution is true?

The server policy applies the same protection profile to all of its protected web applications.

You must put the single web server in to a server pool, in order to use it with HTTP content routing.

You must chain policies so that requests for web application A go to the virtual server for policy A, and requests for web application B go to the virtual server for policy B.

Static or policy-based routes are not required.

Q28. What role does FortiWeb play in ensuring PCI DSS compliance?

PCI specifically requires a WAF

Provides credit card processing capabilities

Provide ability to securely process cash transactions

Provides load balancing between multiple web servers

Explanation
FortiWeb helps you meet all PCI requirements, but PCI now specifically recommends using a WAF, and developing remediations against the top 10 vulnerabilities, according to OWASP.

Q29. When viewing the attack logs on FortiWeb, which client IP address is shown when you are using XFF header rules?

FortiGate public IP

FortiWeb IP

FortiGate local IP

Client real IP

Explanation
When an XFF header reaches Alteon from a client, Alteon removes all the content from the header and injects the client IP address. Alteon then forwards the header to the server.

Q30. What capability can FortiWeb add to your Web App that your Web App may or may not already have?

Automatic backup and recovery

High Availability

HTTP/HTML Form Authentication

SSL Inspection

Q31. Refer to the exhibit.

There is only one administrator account configured on FortiWeb. What must an administrator do to restrict any brute force attacks that attempt to gain access to the FortiWeb management GUI?

Delete the built-in administrator user and create a new one.

Configure IPv4 Trusted Host # 3 with a specific IP address.

The configuration changes must be made on the upstream device.

Change the Access Profile to Read_Only.

Loading …

Fortinet Certified NSE6_FWB-6.4 Dumps Questions Valid NSE6_FWB-6.4 Materials: https://www.testsimulate.com/NSE6_FWB-6.4-study-materials.html

Fortinet NSE6_FWB-6.4 Exam Syllabus Topics:

Leave a Reply Cancel reply