[Oct 19, 2021] Updates Up to 365 days On Valid NSE6_FWB-6.0 Braindumps
Best QualityNSE6_FWB-6.0 Exam Questions Fortinet Test To Gain Brilliante Result
NEW QUESTION 18
In which operation mode(s) can FortiWeb modify HTTP packets? (Choose two.)
- A. Transparent Inspection
- B. Reverse proxy
- C. Offlineprotection
- D. True transparent proxy
Answer: B
NEW QUESTION 19
What is one of the key benefits of the FortiGuard IP Reputation feature?
- A. Provides a Document of IP addresses that are suspect, so that administrators can manually update their blacklists
- B. FortiGuard maintains a list of public IPs with a bad reputation for participating in attacks.
- C. It maintains a list of private IP addresses
- D. It is updated once per year
Answer: B
NEW QUESTION 20
Which of the followingwould be a reason for implementing rewrites?
- A. Send connection to secure channel
- B. Replace vulnerable functions.
- C. Page has been moved to a new IP address
- D. Page has been moved to a new URL
Answer: D
NEW QUESTION 21
Which of the following FortiWeb features is part of the mitigation tools against OWASP A4 threats?
- A. Session Management
- B. Sensitive info masking
- C. Poison Cookie detection
- D. Brute Force blocking
Answer: A
NEW QUESTION 22
Which of the following is true about Local User Accounts?
- A. Must be assigned regardless of any other authentication
- B. Can be used for site publishing
- C. Best suited for large environments with many users
- D. Can be used for Single Sign On
Answer: A
NEW QUESTION 23
When theFortiWeb is configured in Reverse Proxy mode and the FortiGate is configured as an SNAT device, what IP address will the FortiGate's Real Server configuration point at?
- A. Server's real IP
- B. FortiWeb's real IP
- C. IPAddress of the Virtual Server on the FortiWeb
- D. Virtual Server IP on the FortiGate
Answer: D
NEW QUESTION 24
What other consideration must you take into account when configuring Defacement protection
- A. Configure the FortiGate to perform Anti-Defacement as well
- B. Also incorporate a FortiADC into your network
- C. None. FortiWeb completely secures the site against defacement attacks
- D. Use FortiWeb to block SQL Injections and keep regular backups of the Database
Answer: A
NEW QUESTION 25
An e-commerce web app is used by small businesses. Clients often access it from offices behind a router, where clients are on an IPv4 privatenetwork LAN. You need to protect the web application from denial of service attacks that use request floods.
What FortiWeb feature should you configure?
- A. Configure FortiWeb to use "X-Forwarded-For:" headers to find each client's private network IP, and to block attacks using that.
- B. Enable "Shared IP" and configure the separate rate limits for requests from NATted source IPs.
- C. Enable SYN cookies.
- D. Configure a server policy that matches requests from shared Internet connections.
Answer: C
NEW QUESTION 26
How does offloadingcompression to FortiWeb benefit your network?
- A. reduces file size on the client's storage
- B. free up resources on the database server
- C. free up resources on the FortiGate
- D. Free up resources on the web server
Answer: D
NEW QUESTION 27
What capability can FortiWeb add to your Web App that your Web App may or may not already have?
- A. SSL Inspection
- B. Automatic backup and recovery
- C. High Availability
- D. HTTP/HTML Form Authentication
Answer: A
NEW QUESTION 28
You've configured an authentication rule with delegation enabled on FortiWeb.
Whathappens when a user tries to access the web application?
- A. ForitWeb redirects the user tothe web app's authentication page
- B. FrotiWeb redirects users to a FortiAuthenticator page, then if the user authenticates successfully, FortiGate signals to FortiWeb to allow access to the web app
- C. FortiWeb replies with a HTTP challenge of behalf of the server, theif the user authenticates successfully, FortiWeb allows the request and also includes credentials in the request that it forwards to the web app
- D. FortiWeb forwards the HTTP challenge from the server to the client, then monitors the reply, allowing access if the user authenticates successfully
Answer: B
NEW QUESTION 29
A client is trying tostart a session from a page that should normally be accessible only after they have logged in.
When a start page rule detects the invalid session access, what can FortiWeb do? (Choose three.)
- A. Allow the page access, but log the violation
- B. Automatically redirect the client to the login page
- C. Prompt the client to authenticate
- D. Display an access policy message, then allow the client to continue, redirecting them to their requested page
- E. Reply with a "403 Forbidden" HTTP error
Answer: A,B,E
NEW QUESTION 30
......
Focus on NSE6_FWB-6.0 All-in-One Exam Guide For Quick Preparation: https://www.examprepaway.com/Fortinet/braindumps.NSE6_FWB-6.0.ete.file.html