Free NSE6_FWB-6.1 Fortinet NSE 6-FortiWeb 6.1 Exam Dumps

dumps2021-10-06T06:35:55+08:00

Fortinet NSE 6 – FortiWeb 6.1 NSE6_FWB-6.1 exam dumps are the good material for you to study. There are 30 questions in real Fortinet certification NSE6_FWB-6.1 exam, and you have 60 minutes to complete all the questions. The available languages are English and Japanese. Free Fortinet NSE 6 NSE6_FWB-6.1 exam dumps questions are available below.

Page 1 of 1

1. Refer to the exhibit.

Based on the configuration, what would happen if this FortiWeb were to lose power? (Choose two.)

Traffic that passes between port5 and port6 will be inspected.

Traffic will be interrupted between port3 and port4.

All traffic will be interrupted.

Traffic will pass between port5 and port6 uninspected.

2. Which three statements about HTTPS on FortiWeb are true? (Choose three.)

In true transparent mode, the TLS session terminator is a protected web server.

After enabling HSTS, redirects to HTTPS are never needed.

For SNI, you select the certificate that FortiWeb presents in the server pool, not in the server policy.

Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to offer only TLS 1.2.

In transparent inspection mode, you select the certificate that FortiWeb presents in the server pool, not in the server policy.

3. Which two statements about the anti-defacement feature on FortiWeb are true? (Choose two.)

Anti-defacement can redirect users to a backup web server, if it detects a change.

Anti-defacement downloads a copy of your website to RAM, in order to restore a clean image, if it detects defacement.

FortiWeb will only check to see if there are changes on the web server; it will not download the whole file each time.

Anti-defacement does not make a backup copy of your databases.

4. You are using HTTP content routing on FortiWeb. You want requests for web application A to be forwarded to a cluster of web servers, which all host the same web application. You want requests for web application B to be forwarded to a different, single web server.

Which statement about this solution is true?

The server policy applies the same protection profile to all of its protected web applications.

You must put the single web server in to a server pool, in order to use it with HTTP content routing.

You must chain policies so that requests for web application A go to the virtual server for policy A, and requests for web application B go to the virtual server for policy

Static or policy-based routes are not required.

5. Refer to the exhibit.

There is only one administrator account configured on FortiWeb.

What must an administrator do to restrict any brute force attacks that attempt to gain access to the FortiWeb management GUI?

Delete the built-in administrator user and create a new one.

Configure IPv4 Trusted Host # 3 with a specific IP address.

The configuration changes must be made on the upstream device.

Change the Access Profile to Read_Only.

6. What key factor must be considered when setting brute force rate limiting and blocking?

A single client contacting multiple resources

Multiple clients sharing a single Internet connection

Multiple clients from geographically diverse locations

Multiple clients connecting to multiple resources

7. Which regex expression is the correct format for redirecting the URL http://www.example.com?

www.example.com

wwwexamplecom

www/.example/.com

8. What role does FortiWeb play in ensuring PCI DSS compliance?

It provides the ability to securely process cash transactions.

It provides the required SQL server protection.

It provides the WAF required by PC

It provides credit card processing capabilities.

9. What can an administrator do if a client has been incorrectly period blocked?

Nothing, it is not possible to override a period block.

Manually release the ID address from the temporary blacklist.

Force a new IP address to the client.

Disconnect the client from the network.

10. Review the following configuration:

What is the expected result of this configuration setting?

When machine learning (ML) is in its collecting phase, FortiWeb will accept an unlimited number of samples from the same source IP address.

When machine learning (ML) is in its running phase, FortiWeb will accept an unlimited number of samples from the same source IP address.

When machine learning (ML) is in its collecting phase, FortiWeb will not accept any samples from any source IP addresses.

When machine learning (ML) is in its running phase, FortiWeb will accept a set number of samples from the same source IP address.

11. How does FortiWeb protect against defacement attacks?

It keeps a complete backup of all files and the database.

It keeps hashes of files and periodically compares them to the server.

It keeps full copies of all files and directories.

It keeps a live duplicate of the database.

12. What is one of the key benefits of the FortiGuard IP reputation feature?

It maintains a list of private IP addresses.

It provides a document of IP addresses that are suspect, so that administrators can manually update their blacklists.

It is updated once per year.

It maintains a list of public IPs with a bad reputation for participating in attacks.

Free NSE6_FWB-6.1 Fortinet NSE 6-FortiWeb 6.1 Exam Dumps

Free NSE6_FWB-6.1 Fortinet NSE 6-FortiWeb 6.1 Exam Dumps

Share this post

Leave a Reply Cancel reply

Related Posts