Fortinet NSE6_FWB-6.4 Exam Practice Test Instant Access

Question 1

Under which circumstances does FortiWeb use its own certificates? (Choose Two)

ASecondary HTTPS connection to server where FortiWeb acts as a client

BHTTPS to clients

CHTTPS access to GUI

DHTTPS to FortiGate

Answer : A, C

Question 2

You are deploying FortiWeb 6.4 in an Amazon Web Services cloud. Which 2 lines of this initial setup via CLI are incorrect? (Choose two.)

Answer : A, C

Question 3

You are using HTTP content routing on FortiWeb. You want requests for web application A to be forwarded to a cluster of web servers, which all host the same web application. You want requests for web application B to be forwarded to a different, single web server.

Which statement about this solution is true?

AThe server policy applies the same protection profile to all of its protected web applications.

BYou must put the single web server in to a server pool, in order to use it with HTTP content routing.

CYou must chain policies so that requests for web application A go to the virtual server for policy A, and requests for web application B go to the virtual server for policy B.

DStatic or policy-based routes are not required.

Answer : D

Question 4

How does FortiWeb protect against defacement attacks?

AIt keeps a complete backup of all files and the database.

BIt keeps hashes of files and periodically compares them to the server.

CIt keeps full copies of all files and directories.

DIt keeps a live duplicate of the database.

Answer : B

The anti-defacement feature examines a web site's files for changes at specified time intervals. If it detects a change that could indicate a defacement attack, theFortiWebappliancecan notify you and quickly react by automatically restoring the web site contents to the previous backup.

Question 5

The FortiWeb machine learning (ML) feature is a two-phase analysis mechanism.

Which two functions does the first layer perform? (Choose two.)

ADetermines whether an anomaly is a real attack or just a benign anomaly that should be ignored

BBuilds a threat model behind every parameter and HTTP method

CDetermines if a detected threat is a false-positive or not

DDetermines whether traffic is an anomaly, based on observed application traffic over time

Answer : B, D

The first layer uses the Hidden Markov Model (HMM) and monitors access to the application and collects data to build a mathematical model behind every parameter and HTTP method.

Question 6

When FortiWeb triggers a redirect action, which two HTTP codes does it send to the client to inform the browser of the new URL? (Choose two.)

A403

B302

C301

D404

Answer : B, C

Question 7

Which regex expression is the correct format for redirecting the URL http://www.example.com?

Awww\.example\.com

Bwww.example.com

Cwww\example\com

Dwww/.example/.com

Answer : B

\1://www.company.com/\2/\3

Fortinet NSE6_FWB-6.4 Fortinet NSE 6 - FortiWeb 6.4 Exam Practice Test