Fortinet NSE 6 - FortiWeb 6.4 - NSE6_FWB-6.4 Exam Practice Test

Question 1

What can an administrator do if a client has been incorrectly period blocked?

A. Force a new IP address to the client.

B. Nothing, it is not possible to override a period block.

C. Manually release the ID address from the temporary blacklist.

D. Disconnect the client from the network.

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

When FortiWeb triggers a redirect action, which two HTTP codes does it send to the client to inform the browser of the new URL? (Choose two.)

A. 403

B. 302

C. 301

D. 404

Correct Answer: B,C

Question 3

Refer to the exhibit.

FortiWeb is configured to block traffic from Japan to your web application server. However, in the logs, the administrator is seeing traffic allowed from one particular IP address which is geo-located in Japan.
What can the administrator do to solve this problem? (Choose two.)

A. If the IP address is configured as a geo reputation exception, remove it.

B. Configure the IP address as a blacklisted IP address.

C. If the IP address is configured as an IP reputation exception, remove it.

D. Manually update the geo-location IP addresses for Japan.

Correct Answer: A,B

Question 4

You've configured an authentication rule with delegation enabled on FortiWeb.
What happens when a user tries to access the web application?

A. FrotiWeb redirects users to a FortiAuthenticator page, then if the user authenticates successfully, FortiGate signals to FortiWeb to allow access to the web app

B. ForitWeb redirects the user to the web app's authentication page

C. FortiWeb forwards the HTTP challenge from the server to the client, then monitors the reply, allowing access if the user authenticates successfully

D. FortiWeb replies with a HTTP challenge of behalf of the server, the if the user authenticates successfully, FortiWeb allows the request and also includes credentials in the request that it forwards to the web app

Correct Answer: A

Question 5

Which three statements about HTTPS on FortiWeb are true? (Choose three.)

A. In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.

B. After enabling HSTS, redirects to HTTPS are no longer necessary.

C. Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.

D. For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.

E. In true transparent mode, the TLS session terminator is a protected web server.

Correct Answer: A,C,E

Question 6

You are deploying FortiWeb 6.4 in an Amazon Web Services cloud. Which 2 lines of this initial setup via CLI are incorrect? (Choose two.)

A. 2

B. 9

C. 3

D. 6

Correct Answer: C,D

Fortinet NSE 6 - FortiWeb 6.4 - NSE6_FWB-6.4 Exam Practice Test

Latest Update

Useful Links

Contact Us