Fortinet NSE6_FWB-6.1 Dumps – The Sure Way To Pass Exam [Q16-Q39]

Rate this post

Fortinet NSE6_FWB-6.1 Dumps – The Sure Way To Pass Exam

NSE6_FWB-6.1 Exam Questions (Updated 2022) 100% Real Question Answers

NEW QUESTION 16
Refer to the exhibit.

FortiADC is applying SNAT to all inbound traffic going to the servers. When an attack occurs, FortiWeb blocks traffic based on the 192.0.2.1 source IP address, which belongs to FortiADC. The setup is breaking all connectivity and genuine clients are not able to access the servers.
What must the administrator do to avoid this problem? (Choose two.)

Enable the Use X-Forwarded-For setting on FortiWeb.

No Special configuration is required; connectivity will be re-established after the set timeout.

Place FortiWeb in front of FortiADC.

Enable the Add X-Forwarded-For setting on FortiWeb.

NEW QUESTION 17
In which scenario might you want to use the compression feature on FortiWeb?

When you are serving many corporate road warriors using 4G tablets and phones

When you are offering a music streaming service

When you want to reduce buffering of video streams

Never, since most traffic today is already highly compressed

NEW QUESTION 18
You are using HTTP content routing on FortiWeb. You want requests for web application A to be forwarded to a cluster of web servers, which all host the same web application. You want requests for web application B to be forwarded to a different, single web server.
Which statement about this solution is true?

The server policy applies the same protection profile to all of its protected web applications.

You must put the single web server in to a server pool, in order to use it with HTTP content routing.

You must chain policies so that requests for web application A go to the virtual server for policy A, and requests for web application B go to the virtual server for policy B.

Static or policy-based routes are not required.

NEW QUESTION 19
A client is trying to start a session from a page that would normally be accessible only after the client has logged in.
When a start page rule detects the invalid session access, what can FortiWeb do? (Choose three.)

Display an access policy message, then allow the client to continue

Redirect the client to the login page

Allow the page access, but log the violation

Prompt the client to authenticate

Reply with a 403 Forbidden HTTP error

NEW QUESTION 20
The FortiWeb machine learning (ML) feature is a two-phase analysis mechanism.
Which two functions does the first layer perform? (Choose two.)

Determines whether an anomaly is a real attack or just a benign anomaly that should be ignored

Builds a threat model behind every parameter and HTTP method

Determines if a detected threat is a false-positive or not

Determines whether traffic is an anomaly, based on observed application traffic over time

NEW QUESTION 21
Which two statements about running a vulnerability scan are true? (Choose two.)

You should run the vulnerability scan during a maintenance window.

You should run the vulnerability scan in a test environment.

Vulnerability scanning increases the load on FortiWeb, so it should be avoided.

You should run the vulnerability scan on a live website to get accurate results.

NEW QUESTION 22
How does FortiWeb protect against defacement attacks?

It keeps a complete backup of all files and the database.

It keeps hashes of files and periodically compares them to the server.

It keeps full copies of all files and directories.

It keeps a live duplicate of the database.

NEW QUESTION 23
True transparent proxy mode is best suited for use in which type of environment?

New networks where infrastructure is not yet defined

Flexible environments where you can easily change the IP addressing scheme

Small office to home office environments

Environments where you cannot change the IP addressing scheme

NEW QUESTION 24
What role does FortiWeb play in ensuring PCI DSS compliance?

It provides the ability to securely process cash transactions.

It provides the required SQL server protection.

It provides the WAF required by PCI.

It provides credit card processing capabilities.

NEW QUESTION 25
When is it possible to use a self-signed certificate, rather than one purchased from a commercial certificate authority?

If you are a small business or home office

If you are an enterprise whose employees use only mobile devices

If you are an enterprise whose resources do not need security

If you are an enterprise whose computers all trust your active directory or other CA server

NEW QUESTION 26
What can an administrator do if a client has been incorrectly period blocked?

Nothing, it is not possible to override a period block.

Manually release the ID address from the temporary blacklist.

Force a new IP address to the client.

Disconnect the client from the network.

NEW QUESTION 27
Which two statements about the anti-defacement feature on FortiWeb are true? (Choose two.)

Anti-defacement can redirect users to a backup web server, if it detects a change.

Anti-defacement downloads a copy of your website to RAM, in order to restore a clean image, if it detects defacement.

FortiWeb will only check to see if there are changes on the web server; it will not download the whole file each time.

Anti-defacement does not make a backup copy of your databases.

Pass Fortinet NSE6_FWB-6.1 Exam Quickly With DumpsTests: https://www.dumpstests.com/NSE6_FWB-6.1-latest-test-dumps.html

Fortinet NSE6_FWB-6.1 Dumps – The Sure Way To Pass Exam [Q16-Q39]

No Responses

Leave a Reply Cancel reply

Related Certifications

NSE6_FWB-6.1 Practice Tests

Recent Posts

Recent Comments

Categories