Get New 2021 Fortinet exam NSE6_FWB-6.1 Dumps Bundle On flat Updated Dumps!
Full NSE6_FWB-6.1 Practice Test and 30 unique questions with explanations waiting just for you, get it now!
NEW QUESTION 11
Refer to the exhibit.
There is only one administrator account configured on FortiWeb. What must an administrator do to restrict any brute force attacks that attempt to gain access to the FortiWeb management GUI?
- A. Change the Access Profile to Read_Only.
- B. Configure IPv4 Trusted Host # 3 with a specific IP address.
- C. The configuration changes must be made on the upstream device.
- D. Delete the built-in administrator user and create a new one.
Answer: D
NEW QUESTION 12
Review the following configuration:
What is the expected result of this configuration setting?
- A. When machine learning (ML) is in its collecting phase, FortiWeb will not accept any samples from any source IP addresses.
- B. When machine learning (ML) is in its running phase, FortiWeb will accept an unlimited number of samples from the same source IP address.
- C. When machine learning (ML) is in its collecting phase, FortiWeb will accept an unlimited number of samples from the same source IP address.
- D. When machine learning (ML) is in its running phase, FortiWeb will accept a set number of samples from the same source IP address.
Answer: C
NEW QUESTION 13
In which scenario might you want to use the compression feature on FortiWeb?
- A. When you are serving many corporate road warriors using 4G tablets and phones
- B. Never, since most traffic today is already highly compressed
- C. When you want to reduce buffering of video streams
- D. When you are offering a music streaming service
Answer: B
Explanation:
FortiWeb might expend resources compressing responses that have already been compressed by the server.
NEW QUESTION 14
In which two operating modes can FortiWeb modify HTTP packets? (Choose two.)
- A. True transparent proxy
- B. Transparent inspection
- C. Offline protection
- D. Reverse proxy
Answer: A,C
Explanation:
FortiWeb appliances operating in offline protection mode or either of the transparent modes
NEW QUESTION 15
Which statement about local user accounts is true?
- A. They must be assigned, regardless of any other authentication.
- B. They are best suited for large environments with many users.
- C. They cannot be used for site publishing.
- D. They can be used for SSO.
Answer: D
Explanation:
You can configure the Remedy Single Sign-On server to authenticate TrueSight Capacity Optimization users as local users.
NEW QUESTION 16
When FortiWeb triggers a redirect action, which two HTTP codes does it send to the client to inform the browser of the new URL? (Choose two.)
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A,B
NEW QUESTION 17
What role does FortiWeb play in ensuring PCI DSS compliance?
- A. It provides the ability to securely process cash transactions.
- B. It provides the required SQL server protection.
- C. It provides credit card processing capabilities.
- D. It provides the WAF required by PCI.
Answer: C
Explanation:
FortiWeb protects against attacks that lead to sensitive data exposure such as SQL Injection and other injection types. Additionally, FortiWeb inspects all web server outgoing traffic for sensitive data such as Social Security numbers, credit card numbers and other predefined or custom based sensitive data.
NEW QUESTION 18
When is it possible to use a self-signed certificate, rather than one purchased from a commercial certificate authority?
- A. If you are a small business or home office
- B. If you are an enterprise whose resources do not need security
- C. If you are an enterprise whose employees use only mobile devices
- D. If you are an enterprise whose computers all trust your active directory or other CA server
Answer: B
Explanation:
This can include SSL/TLS certificates, code signing certificates, and S/MIME certificates. The reason why they're considered different from traditional certificate-authority signed certificates is that they're created, issued, and signed by the company or developer who is responsible for the website or software being signed. This is why self-signed certificates are considered unsafe for public-facing websites and applications.
NEW QUESTION 19
Refer to the exhibits.
FortiWeb is configured in reverse proxy mode and it is deployed downstream to FortiGate. Based on the configuration shown in the exhibits, which of the following statements is true?
- A. FortiGate should forward web traffic to virtual server IP address.
- B. FortiGate should forward web traffic to the server pool IP addresses.
- C. The configuration is incorrect. FortiWeb should always be located upstream to FortiGate.
- D. You must disable the Preserve Client IP setting on FotriGate for this configuration to work.
Answer: A
NEW QUESTION 20
Which two statements about the anti-defacement feature on FortiWeb are true? (Choose two.)
- A. Anti-defacement downloads a copy of your website to RAM, in order to restore a clean image, if it detects defacement.
- B. Anti-defacement can redirect users to a backup web server, if it detects a change.
- C. FortiWeb will only check to see if there are changes on the web server; it will not download the whole file each time.
- D. Anti-defacement does not make a backup copy of your databases.
Answer: C,D
Explanation:
Anti-defacement backs up web pages only, not databases.
If it detects any file changes, the FortiWeb appliance will download a new backup revision.
NEW QUESTION 21
Refer to the exhibit.
FortiWeb is configured to block traffic from Japan to your web application server. However, in the logs, the administrator is seeing traffic allowed from one particular IP address which is geo-located in Japan.
What can the administrator do to solve this problem? (Choose two.)
- A. Manually update the geo-location IP addresses for Japan.
- B. If the IP address is configured as an IP reputation exception, remove it.
- C. If the IP address is configured as a geo reputation exception, remove it.
- D. Configure the IP address as a blacklisted IP address.
Answer: A,D
Explanation:
IP reputation leverages many techniques for accurate, early, and frequently updated identification of compromised and malicious clients so you can block attackers before they target your servers.
IP blacklisting is a method used to filter out illegitimate or malicious IP addresses from accessing your networks. Blacklists are lists containing ranges of or individual IP addresses that you want to block.
Reference:
https://www.imperva.com/learn/application-security/ip-blacklist/
NEW QUESTION 22
Which three statements about HTTPS on FortiWeb are true? (Choose three.)
- A. In true transparent mode, the TLS session terminator is a protected web server.
- B. In transparent inspection mode, you select the certificate that FortiWeb presents in the server pool, not in the server policy.
- C. For SNI, you select the certificate that FortiWeb presents in the server pool, not in the server policy.
- D. After enabling HSTS, redirects to HTTPS are never needed.
- E. Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to offer only TLS 1.2.
Answer: A,B,C
NEW QUESTION 23
......
Reduce Your Chance of Failure in NSE6_FWB-6.1 Exam: https://www.troytecdumps.com/NSE6_FWB-6.1-troytec-exam-dumps.html