[Sep 14, 2022] NSE6_FWB-6.1 PDF Recently Updated Questions Dumps to Improve Exam Score [Q12-Q35]

NSE6_FWB-6.1 Fortinet

admin • September 14, 2022

[Sep 14, 2022] NSE6_FWB-6.1 PDF Recently Updated Questions Dumps to Improve Exam Score [Q12-Q35]

Rate this post

[Sep 14, 2022] NSE6_FWB-6.1 PDF Recently Updated Questions Dumps to Improve Exam Score

NSE6_FWB-6.1 Dumps Full Questions with Free PDF Questions to Pass

NO.12 Review the following configuration:

What is the expected result of this configuration setting?

When machine learning (ML) is in its collecting phase, FortiWeb will accept an unlimited number of samples from the same source IP address.

When machine learning (ML) is in its running phase, FortiWeb will accept an unlimited number of samples from the same source IP address.

When machine learning (ML) is in its collecting phase, FortiWeb will not accept any samples from any source IP addresses.

When machine learning (ML) is in its running phase, FortiWeb will accept a set number of samples from the same source IP address.

NO.13 True transparent proxy mode is best suited for use in which type of environment?

New networks where infrastructure is not yet defined

Flexible environments where you can easily change the IP addressing scheme

Small office to home office environments

Environments where you cannot change the IP addressing scheme

Does not require changes to the IP address scheme of the network. Requests are destined for a web server and not the FortiWeb appliance. This operation mode supports the same feature set as True Transparent Proxy mode.

NO.14 When viewing the attack logs on FortiWeb, which client IP address is shown when you are using XFF header rules?

FortiGate public IP

FortiWeb IP

FortiGate local IP

Client real IP

When an XFF header reaches Alteon from a client, Alteon removes all the content from the header and injects the client IP address. Alteon then forwards the header to the server.

NO.15 Which statement about local user accounts is true?

They are best suited for large environments with many users.

They cannot be used for site publishing.

They must be assigned, regardless of any other authentication.

They can be used for SSO.

You can configure the Remedy Single Sign-On server to authenticate TrueSight Capacity Optimization users as local users.

NO.16 Which algorithm is used to build mathematical models for bot detection?

HCM

SVN

SVM

HMM

FortiWeb uses SVM (Support Vector Machine) algorithm to build up the bot detection model

NO.17 Which three statements about HTTPS on FortiWeb are true? (Choose three.)

In true transparent mode, the TLS session terminator is a protected web server.

After enabling HSTS, redirects to HTTPS are never needed.

For SNI, you select the certificate that FortiWeb presents in the server pool, not in the server policy.

Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to offer only TLS 1.2.

In transparent inspection mode, you select the certificate that FortiWeb presents in the server pool, not in the server policy.

NO.18 When is it possible to use a self-signed certificate, rather than one purchased from a commercial certificate authority?

If you are a small business or home office

If you are an enterprise whose employees use only mobile devices

If you are an enterprise whose resources do not need security

If you are an enterprise whose computers all trust your active directory or other CA server

This can include SSL/TLS certificates, code signing certificates, and S/MIME certificates. The reason why they’re considered different from traditional certificate-authority signed certificates is that they’re created, issued, and signed by the company or developer who is responsible for the website or software being signed. This is why self-signed certificates are considered unsafe for public-facing websites and applications.

NO.19 What key factor must be considered when setting brute force rate limiting and blocking?

A single client contacting multiple resources

Multiple clients sharing a single Internet connection

Multiple clients from geographically diverse locations

Multiple clients connecting to multiple resources

NO.20 Which would be a reason to implement HTTP rewriting?

The original page has moved to a new URL

To replace a vulnerable function in the requested URL

To send the request to secure channel

The original page has moved to a new IP address

Create a new URL rewriting rule.

NO.21 What must you do with your FortiWeb logs to ensure PCI DSS compliance?

Store in an off-site location

Erase them every two weeks

Enable masking of sensitive data

Compress them into a .zip file format

NO.22 FortiWeb offers the same load balancing algorithms as FortiGate.
Which two Layer 7 switch methods does FortiWeb also offer? (Choose two.)

Round robin

HTTP session-based round robin

HTTP user-based round robin

HTTP content routes

Reference:
http://fortinet.globalgate.com.ar/pdfs/FortiWeb/FortiWeb_DS.pdf

NO.23 You are using HTTP content routing on FortiWeb. You want requests for web application A to be forwarded to a cluster of web servers, which all host the same web application. You want requests for web application B to be forwarded to a different, single web server.
Which statement about this solution is true?

The server policy applies the same protection profile to all of its protected web applications.

You must put the single web server in to a server pool, in order to use it with HTTP content routing.

You must chain policies so that requests for web application A go to the virtual server for policy A, and requests for web application B go to the virtual server for policy B.

Static or policy-based routes are not required.

Loading …