Authentic Best resources for NSE6_FWB-6.0 Test Engine Practice Exam
[2021] NSE6_FWB-6.0 PDF Questions - Perfect Prospect To Go With DumpsKing Practice Exam
NEW QUESTION 16
How does your FortiWeb configuration differ if the FortiWeb is upstream of the SNAT device instead of downstream of the SNAT device?
- A. You must enable "Add" X-Forwarded-For: instead of the "Use" X-Forwarded-For: option.
- B. No special configuration required
- C. FortiWeb must be set for Transparent Mode
- D. You must enable the "Use" X-Forwarded-For: option.
Answer: D
NEW QUESTION 17
Which operationmode does not require additional configuration in order to allow FTP traffic to your web server?
- A. Transparent Inspection
- B. Offline Protection
- C. Reverse-Proxy
- D. True Transparent Proxy
Answer: A
NEW QUESTION 18
Which is true about HTTPS on FortiWeb? (Choose three.)
- A. In true transparent mode, the TLS session terminator is a protected web server.
- B. In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.
- C. Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.
- D. After enabling HSTS, redirects to HTTPS are no longer necessary.
- E. For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.
Answer: A,B,E
NEW QUESTION 19
What benefit does Auto Learning provide?
- A. Automatically builds rules sets
- B. FortiWeb scans all traffic without taking action and makes recommendations on rules
- C. Automatically blocks all detected threats
- D. Automatically identifies and blocks suspicious IPs
Answer: A
NEW QUESTION 20
Under what circumstances would youwant to use the temporary uncompress feature of FortiWeb?
- A. In the case of compression being done on the FortiWeb, to inspect the content of the compressed file
- B. In the case of the file being a .MP3 music file
- C. In the case of the file being an .MP4 video
- D. In the case of compression being done on the web server, to inspect the content of the compressed file.
Answer: D
NEW QUESTION 21
How does offloadingcompression to FortiWeb benefit your network?
- A. reduces file size on the client's storage
- B. free up resources on the database server
- C. free up resources on the FortiGate
- D. Free up resources on the web server
Answer: D
NEW QUESTION 22
An e-commerce web app is used by small businesses. Clients often access it from offices behind a router, where clients are on an IPv4 privatenetwork LAN. You need to protect the web application from denial of service attacks that use request floods.
What FortiWeb feature should you configure?
- A. Configure FortiWeb to use "X-Forwarded-For:" headers to find each client's private network IP, and to block attacks using that.
- B. Enable "Shared IP" and configure the separate rate limits for requests from NATted source IPs.
- C. Enable SYN cookies.
- D. Configure a server policy that matches requests from shared Internet connections.
Answer: C
NEW QUESTION 23
When generating a protection configuration from an auto learning report what critical step must you dobefore generating the final protection configuration?
- A. Drill down in the report to correct any false positives.
- B. Take the FortiWeb offline to apply the profile
- C. Restart the FortiWeb to clear the caches
- D. Activate the report to create t profile
Answer: A
NEW QUESTION 24
How does an ADOM differ from a VDOM?
- A. Allows you to have 1 administrator for multiple tenants
- B. ADOMs do not have virtual networking
- C. ADOMs only affect specific functions, and do not provide full separation like VDOMs do.
- D. ADOMs improve performance by offloading some functions.
Answer: A
NEW QUESTION 25
What is one of the key benefits of the FortiGuard IP Reputation feature?
- A. Provides a Document of IP addresses that are suspect, so that administrators can manually update their blacklists
- B. FortiGuard maintains a list of public IPs with a bad reputation for participating in attacks.
- C. It maintains a list of private IP addresses
- D. It is updated once per year
Answer: B
NEW QUESTION 26
Reverse-proxy mode is best suited for use in which type of environment?
- A. Flexible environments where you can easily change the IP addressing scheme
- B. Small Office/Home Office environments
- C. New networks where infrastructure is not yet defined
- D. Environments where you cannot change your IP addressing scheme
Answer: D
NEW QUESTION 27
What capability can FortiWeb add to your Web App that your Web App may or may not already have?
- A. SSL Inspection
- B. Automatic backup and recovery
- C. High Availability
- D. HTTP/HTML Form Authentication
Answer: A
NEW QUESTION 28
......
Best updated resource for NSE6_FWB-6.0 Online Practice Exam: https://www.dumpsking.com/NSE6_FWB-6.0-testking-dumps.html
