New NSE6_FWB-6.4 Dumps Online For Fortinet NSE 6 – FortiWeb 6.4 Exam Preparation

1. Which two statements about running a vulnerability scan are true? (Choose two.)

2. FortiWeb offers the same load balancing algorithms as FortiGate.

Which two Layer 7 switch methods does FortiWeb also offer? (Choose two.)

3. Which would be a reason to implement HTTP rewriting?

4. Refer to the exhibit.

FortiADC is applying SNAT to all inbound traffic going to the servers. When an attack occurs, FortiWeb blocks traffic based on the 192.0.2.1 source IP address, which belongs to FortiADC. The setup is breaking all connectivity and genuine clients are not able to access the servers .

What must the administrator do to avoid this problem? (Choose two.)

5. Which statement about local user accounts is true?

6. Refer to the exhibit.

Based on the configuration, what would happen if this FortiWeb were to lose power? (Choose two.)

7. Refer to the exhibit.

FortiWeb is configured to block traffic from Japan to your web application server. However, in the logs, the administrator is seeing traffic allowed from one particular IP address which is geo-located in Japan.

What can the administrator do to solve this problem? (Choose two.)

8. Which algorithm is used to build mathematical models for bot detection?

9. A client is trying to start a session from a page that would normally be accessible only after the client has logged in.

When a start page rule detects the invalid session access, what can FortiWeb do? (Choose three.)

10. Refer to the exhibit.

Many legitimate users are being identified as bots. FortiWeb bot detection has been configured with the settings shown in the exhibit. The FortiWeb administrator has already verified that the current model is accurate.

What can the administrator do to fix this problem, making sure that real bots are not allowed through FortiWeb?

11. What can an administrator do if a client has been incorrectly period blocked?

12. Which regex expression is the correct format for redirecting the URL http://www.example.com?

13. When FortiWeb triggers a redirect action, which two HTTP codes does it send to the client to inform the browser of the new URL? (Choose two.)

14. True transparent proxy mode is best suited for use in which type of environment?

15. Review the following configuration:

What is the expected result of this configuration setting?

16. Which two statements about the anti-defacement feature on FortiWeb are true? (Choose two.)

17. What must you do with your FortiWeb logs to ensure PCI DSS compliance?

18. What role does FortiWeb play in ensuring PCI DSS compliance?

19. Refer to the exhibit.

There is only one administrator account configured on FortiWeb .

What must an administrator do to restrict any brute force attacks that attempt to gain access to the FortiWeb management GUI?

20. What key factor must be considered when setting brute force rate limiting and blocking?