Up To The Immediate Present NSE6_FWB-6.0 Practice Question For Fortinet NSE 6 - FortiWeb 6.0 Certification

NEW QUESTION 1
You are using HTTP content routing onFortiWeb. Requests for web app A should be forwarded to a cluster of web servers which all host the same web app. Requests for web app B should be forwarded to a different, single web server.
Which is true about the solution?

• A. Static or policy-based routes are not required.
• B. To achieve HTTP content routing, you must chain policies: the first policy accepts all traffic, and forwards requests for web app A to the virtual server for policy
• C. It also forwards requests for web app B to the virtual serverfor policy
• D. Policy A and Policy B apply their app-specific protection profiles, and then distribute that app’s traffic among all members of the server farm.
• E. You must put the single web server into a server pool in order to use it with HTTP content routing.
• F. The server policy applies the same protection profile to all its protected web apps.

Answer: B

NEW QUESTION 2
You are deploying FortiWeb6.0 in an Amazon Web Services cloud. Which 2 lines of this initial setup via CLI are incorrect? (Choose two.)

• A. 6
• B. 9
• C. 3
• D. 2

Answer: AC

NEW QUESTION 3
An e-commerce web app is used by small businesses. Clients often access it from offices behind a router, where clients are on an IPv4 privatenetwork LAN. You need to protect the web application from denial of service attacks that use request floods.
What FortiWeb feature should you configure?

• A. Enable “Shared IP” and configure the separate rate limits for requests from NATted source IPs.
• B. Configure FortiWeb to use “X-Forwarded-For:” headers to find each client’s private network IP, and to block attacks using that.
• C. Enable SYN cookies.
• D. Configure a server policy that matches requests from shared Internet connections.

Answer: C

NEW QUESTION 4
You are configuring FortiAnalyzer to store logs from FortiWeb. Which is true?

• A. FortiAnalyzer will store antivirus and DLP archives from FortiWeb.
• B. You mustenable ADOMs on FortiAnalyzer.
• C. To store logs from FortiWeb6.0, on FortiAnalyzer, you must select “FrotiWeb 5.4”.
• D. FortiWeb will query FortiAnalyzer for reports, instead of generating them locally.

Answer: B

NEW QUESTION 5
Under what circumstances would youwant to use the temporary uncompress feature of FortiWeb?

• A. In the case of compression being done on the FortiWeb, to inspect the content of the compressed file
• B. In the case of the file being a .MP3 music file
• C. In the case of compression being done on the web server, to inspect the content of the compressed file.
• D. In the case of the file being an .MP4 video

Answer: C

NEW QUESTION 6
When viewing the attack logs on your FortiWeb, which IP Address is shown for the client when using XFF Header rules?

• A. FortiGate’s public IP
• B. FortiGate’s local IP
• C. FortiWeb’s IP
• D. Client’s real IP

Answer: D

NEW QUESTION 7
When theFortiWeb is configured in Reverse Proxy mode and the FortiGate is configured as an SNAT device, what IP address will the FortiGate’s Real Server configuration point at?

• A. Virtual Server IP on the FortiGate
• B. Server’s real IP
• C. FortiWeb’s real IP
• D. IPAddress of the Virtual Server on the FortiWeb

Answer: A

NEW QUESTION 8
What is one of the key benefits of the FortiGuard IP Reputation feature?

• A. FortiGuard maintains a list of public IPs with a bad reputation for participating in attacks.
• B. It is updated once per year
• C. Provides a Document of IP addresses that are suspect, so that administrators can manually update their blacklists
• D. It maintains a list of private IP addresses

Answer: A

NEW QUESTION 9
......