[Feb 05, 2022] NSE6_FWB-6.1 Ultimate Study Guide - ExamPrepAway
Ultimate Guide to Prepare NSE6_FWB-6.1 Certification Exam for NSE 6 Network Security Specialist in 2022
NEW QUESTION 10
In which two operating modes can FortiWeb modify HTTP packets? (Choose two.)
- A. True transparent proxy
- B. Reverse proxy
- C. Transparent inspection
- D. Offline protection
Answer: A,D
Explanation:
FortiWeb appliances operating in offline protection mode or either of the transparent modes
NEW QUESTION 11
Which algorithm is used to build mathematical models for bot detection?
- A. SVM
- B. HMM
- C. SVN
- D. HCM
Answer: A
Explanation:
FortiWeb uses SVM (Support Vector Machine) algorithm to build up the bot detection model
NEW QUESTION 12
Refer to the exhibit.
Based on the configuration, what would happen if this FortiWeb were to lose power? (Choose two.)
- A. Traffic will be interrupted between port3 and port4.
- B. Traffic will pass between port5 and port6 uninspected.
- C. Traffic that passes between port5 and port6 will be inspected.
- D. All traffic will be interrupted.
Answer: A,B
NEW QUESTION 13
You are using HTTP content routing on FortiWeb. You want requests for web application A to be forwarded to a cluster of web servers, which all host the same web application. You want requests for web application B to be forwarded to a different, single web server.
Which statement about this solution is true?
- A. Static or policy-based routes are not required.
- B. The server policy applies the same protection profile to all of its protected web applications.
- C. You must put the single web server in to a server pool, in order to use it with HTTP content routing.
- D. You must chain policies so that requests for web application A go to the virtual server for policy A, and requests for web application B go to the virtual server for policy B.
Answer: A
NEW QUESTION 14
Which two statements about running a vulnerability scan are true? (Choose two.)
- A. You should run the vulnerability scan in a test environment.
- B. You should run the vulnerability scan during a maintenance window.
- C. You should run the vulnerability scan on a live website to get accurate results.
- D. Vulnerability scanning increases the load on FortiWeb, so it should be avoided.
Answer: A,B
Explanation:
Should the Vulnerability Scanner allow it, SVMS will set the scan schedule (or schedules) to run in a maintenance window. SVMS will advise Client of the scanner's ability to complete the scan(s) within the maintenance window.
Vulnerabilities on live web sites. Instead, duplicate the web site and its database in a test environment.
Reference:
https://help.fortinet.com/fweb/552/Content/FortiWeb/fortiweb-admin/vulnerability_scans.htm
NEW QUESTION 15
Refer to the exhibit.
Many legitimate users are being identified as bots. FortiWeb bot detection has been configured with the settings shown in the exhibit. The FortiWeb administrator has already verified that the current model is accurate.
What can the administrator do to fix this problem, making sure that real bots are not allowed through FortiWeb?
- A. Change Model Type to Strict
- B. Disable Dynamically Update Model
- C. Enable Bot Confirmation
- D. Change Action under Action Settings to Alert
Answer: C
Explanation:
Bot Confirmation
If the number of anomalies from a user has reached the Anomaly Count, the system executes Bot Confirmation before taking actions.
The Bot Confirmation is to confirm if the user is indeed a bot. The system sends RBE (Real Browser Enforcement) JavaScript or CAPTCHA to the client to double check if it's a real bot.
NEW QUESTION 16
Review the following configuration:
What is the expected result of this configuration setting?
- A. When machine learning (ML) is in its collecting phase, FortiWeb will not accept any samples from any source IP addresses.
- B. When machine learning (ML) is in its running phase, FortiWeb will accept a set number of samples from the same source IP address.
- C. When machine learning (ML) is in its collecting phase, FortiWeb will accept an unlimited number of samples from the same source IP address.
- D. When machine learning (ML) is in its running phase, FortiWeb will accept an unlimited number of samples from the same source IP address.
Answer: C
NEW QUESTION 17
Which regex expression is the correct format for redirecting the URL http://www.example.com?
- A. www\.example\.com
- B. www.example.com
- C. www/.example/.com
- D. www\example\com
Answer: B
Explanation:
\1://www.company.com/\2/\3
NEW QUESTION 18
Refer to the exhibit.
FortiADC is applying SNAT to all inbound traffic going to the servers. When an attack occurs, FortiWeb blocks traffic based on the 192.0.2.1 source IP address, which belongs to FortiADC. The setup is breaking all connectivity and genuine clients are not able to access the servers.
What must the administrator do to avoid this problem? (Choose two.)
- A. Place FortiWeb in front of FortiADC.
- B. Enable the Use X-Forwarded-For setting on FortiWeb.
- C. Enable the Add X-Forwarded-For setting on FortiWeb.
- D. No Special configuration is required; connectivity will be re-established after the set timeout.
Answer: B,C
Explanation:
Configure your load balancer to insert or append to an X-Forwarded-For:, X-Real-IP:, or other HTTP X-header. Also configure FortiWeb to find the original attacker's or client's IP address in that HTTP header
NEW QUESTION 19
Which three statements about HTTPS on FortiWeb are true? (Choose three.)
- A. For SNI, you select the certificate that FortiWeb presents in the server pool, not in the server policy.
- B. Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to offer only TLS 1.2.
- C. In transparent inspection mode, you select the certificate that FortiWeb presents in the server pool, not in the server policy.
- D. After enabling HSTS, redirects to HTTPS are never needed.
- E. In true transparent mode, the TLS session terminator is a protected web server.
Answer: A,C,E
NEW QUESTION 20
Which would be a reason to implement HTTP rewriting?
- A. The original page has moved to a new URL
- B. To replace a vulnerable function in the requested URL
- C. To send the request to secure channel
- D. The original page has moved to a new IP address
Answer: A
Explanation:
Create a new URL rewriting rule.
NEW QUESTION 21
Which statement about local user accounts is true?
- A. They are best suited for large environments with many users.
- B. They can be used for SSO.
- C. They must be assigned, regardless of any other authentication.
- D. They cannot be used for site publishing.
Answer: B
Explanation:
You can configure the Remedy Single Sign-On server to authenticate TrueSight Capacity Optimization users as local users.
NEW QUESTION 22
......
NSE 6 Network Security Specialist Fundamentals-NSE6_FWB-6.1 Exam-Practice-Dumps: https://www.examprepaway.com/Fortinet/braindumps.NSE6_FWB-6.1.ete.file.html