NSE6_FWB-6.4 Exam Training Practice Tests (Fortinet NSE 6

Question 1

What benefit does Auto Learning provide?

A. Automatically identifies and blocks suspicious IPs B. Automatically builds rules sets C. Automatically blocks all detected threats D. FortiWeb scans all traffic without taking action and makes recommendations on rules

Correct Answer: B

Question 2

Refer to the exhibit.

FortiADC is applying SNAT to all inbound traffic going to the servers. When an attack occurs, FortiWeb blocks traffic based on the 192.0.2.1 source IP address, which belongs to FortiADC. The setup is breaking all connectivity and genuine clients are not able to access the servers.
What must the administrator do to avoid this problem? (Choose two.)

A. Enable the Add X-Forwarded-For setting on FortiWeb. B. No Special configuration is required; connectivity will be re-established after the set timeout. C. Enable the Use X-Forwarded-For setting on FortiWeb. D. Place FortiWeb in front of FortiADC.

Correct Answer: C,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 3

Review the following configuration:

What is the expected result of this configuration setting?

A. When machine learning (ML) is in its running phase, FortiWeb will accept an unlimited number of samples from the same source IP address. B. When machine learning (ML) is in its collecting phase, FortiWeb will not accept any samples from any source IP addresses. C. When machine learning (ML) is in its running phase, FortiWeb will accept a set number of samples from the same source IP address. D. When machine learning (ML) is in its collecting phase, FortiWeb will accept an unlimited number of samples from the same source IP address.

Correct Answer: D

Question 4

Under which circumstances does FortiWeb use its own certificates? (Choose Two)

A. HTTPS to FortiGate B. Secondary HTTPS connection to server where FortiWeb acts as a client C. HTTPS access to GUI D. HTTPS to clients

Correct Answer: B,C

Question 5

Which of the following is true about Local User Accounts?

A. Best suited for large environments with many users B. Can be used for Single Sign On C. Can be used for site publishing D. Must be assigned regardless of any other authentication

Correct Answer: C

Question 6

A client is trying to start a session from a page that would normally be accessible only after the client has logged in.
When a start page rule detects the invalid session access, what can FortiWeb do? (Choose three.)

A. Redirect the client to the login page B. Prompt the client to authenticate C. Display an access policy message, then allow the client to continue D. Allow the page access, but log the violation E. Reply with a 403 Forbidden HTTP error

Correct Answer: A,D,E

Fortinet NSE 6 - FortiWeb 6.4 - NSE6_FWB-6.4 Exam Practice Test