[Nov 11, 2022] NSE6_FWB-6.1 Practice Exam Dumps - 99% Marks In Fortinet Exam
Updated Verified NSE6_FWB-6.1 Q&As - Pass Guarantee or Full Refund
Related Certification Overview
As already noted above, the Fortinet NSE6_FWB-6.1 exam can be one of the four tests that the professionals who want to become Network Security Specialist certified can choose to take. Apart from this one, the applicants should opt for three more product-specific exams from the following ones:
- Fortinet NSE 6 – FortiMail 6.2
- Fortinet NSE 6 – FortiADC 5.2
- Fortinet NSE 6 – FortiVoice 6.0
- Fortinet NSE 6 – FortiNAC 8.5
- Fortinet NSE 6 – FortiAuthenticator 6.1
Prerequisites of Fortinet NSE6_FWB-6.1 Exam
Familiarity with the deployment and configuration of Fortinet solutions in Azure
NEW QUESTION 16
How does FortiWeb protect against defacement attacks?
- A. It keeps a complete backup of all files and the database.
- B. It keeps hashes of files and periodically compares them to the server.
- C. It keeps full copies of all files and directories.
- D. It keeps a live duplicate of the database.
Answer: B
Explanation:
The anti-defacement feature examines a web site's files for changes at specified time intervals. If it detects a change that could indicate a defacement attack, the FortiWeb appliance can notify you and quickly react by automatically restoring the web site contents to the previous backup.
NEW QUESTION 17
Which would be a reason to implement HTTP rewriting?
- A. The original page has moved to a new URL
- B. To send the request to secure channel
- C. The original page has moved to a new IP address
- D. To replace a vulnerable function in the requested URL
Answer: A
Explanation:
Create a new URL rewriting rule.
NEW QUESTION 18
Which regex expression is the correct format for redirecting the URL http://www.example.com?
- A. www\example\com
- B. www.example.com
- C. www/.example/.com
- D. www\.example\.com
Answer: B
Explanation:
\1://www.company.com/\2/\3
NEW QUESTION 19
What role does FortiWeb play in ensuring PCI DSS compliance?
- A. It provides the required SQL server protection.
- B. It provides credit card processing capabilities.
- C. It provides the ability to securely process cash transactions.
- D. It provides the WAF required by PCI.
Answer: B
Explanation:
FortiWeb protects against attacks that lead to sensitive data exposure such as SQL Injection and other injection types. Additionally, FortiWeb inspects all web server outgoing traffic for sensitive data such as Social Security numbers, credit card numbers and other predefined or custom based sensitive data.
NEW QUESTION 20
Which two statements about the anti-defacement feature on FortiWeb are true? (Choose two.)
- A. Anti-defacement does not make a backup copy of your databases.
- B. FortiWeb will only check to see if there are changes on the web server; it will not download the whole file each time.
- C. Anti-defacement can redirect users to a backup web server, if it detects a change.
- D. Anti-defacement downloads a copy of your website to RAM, in order to restore a clean image, if it detects defacement.
Answer: A,B
Explanation:
Anti-defacement backs up web pages only, not databases.
If it detects any file changes, the FortiWeb appliance will download a new backup revision.
NEW QUESTION 21
Which algorithm is used to build mathematical models for bot detection?
- A. SVN
- B. SVM
- C. HMM
- D. HCM
Answer: B
Explanation:
FortiWeb uses SVM (Support Vector Machine) algorithm to build up the bot detection model
NEW QUESTION 22
Refer to the exhibit.
There is only one administrator account configured on FortiWeb. What must an administrator do to restrict any brute force attacks that attempt to gain access to the FortiWeb management GUI?
- A. The configuration changes must be made on the upstream device.
- B. Configure IPv4 Trusted Host # 3 with a specific IP address.
- C. Delete the built-in administrator user and create a new one.
- D. Change the Access Profile to Read_Only.
Answer: C
NEW QUESTION 23
In which two operating modes can FortiWeb modify HTTP packets? (Choose two.)
- A. Offline protection
- B. Transparent inspection
- C. Reverse proxy
- D. True transparent proxy
Answer: A,D
Explanation:
FortiWeb appliances operating in offline protection mode or either of the transparent modes
NEW QUESTION 24
Refer to the exhibit.
FortiWeb is configured to block traffic from Japan to your web application server. However, in the logs, the administrator is seeing traffic allowed from one particular IP address which is geo-located in Japan.
What can the administrator do to solve this problem? (Choose two.)
- A. Configure the IP address as a blacklisted IP address.
- B. Manually update the geo-location IP addresses for Japan.
- C. If the IP address is configured as a geo reputation exception, remove it.
- D. If the IP address is configured as an IP reputation exception, remove it.
Answer: A,B
Explanation:
IP reputation leverages many techniques for accurate, early, and frequently updated identification of compromised and malicious clients so you can block attackers before they target your servers.
IP blacklisting is a method used to filter out illegitimate or malicious IP addresses from accessing your networks. Blacklists are lists containing ranges of or individual IP addresses that you want to block.
Reference:
https://www.imperva.com/learn/application-security/ip-blacklist/
NEW QUESTION 25
You are using HTTP content routing on FortiWeb. You want requests for web application A to be forwarded to a cluster of web servers, which all host the same web application. You want requests for web application B to be forwarded to a different, single web server.
Which statement about this solution is true?
- A. You must put the single web server in to a server pool, in order to use it with HTTP content routing.
- B. You must chain policies so that requests for web application A go to the virtual server for policy A, and requests for web application B go to the virtual server for policy B.
- C. The server policy applies the same protection profile to all of its protected web applications.
- D. Static or policy-based routes are not required.
Answer: D
NEW QUESTION 26
Refer to the exhibits.
FortiWeb is configured in reverse proxy mode and it is deployed downstream to FortiGate. Based on the configuration shown in the exhibits, which of the following statements is true?
- A. FortiGate should forward web traffic to the server pool IP addresses.
- B. You must disable the Preserve Client IP setting on FotriGate for this configuration to work.
- C. The configuration is incorrect. FortiWeb should always be located upstream to FortiGate.
- D. FortiGate should forward web traffic to virtual server IP address.
Answer: D
NEW QUESTION 27
The FortiWeb machine learning (ML) feature is a two-phase analysis mechanism.
Which two functions does the first layer perform? (Choose two.)
- A. Builds a threat model behind every parameter and HTTP method
- B. Determines whether an anomaly is a real attack or just a benign anomaly that should be ignored
- C. Determines whether traffic is an anomaly, based on observed application traffic over time
- D. Determines if a detected threat is a false-positive or not
Answer: A,C
Explanation:
The first layer uses the Hidden Markov Model (HMM) and monitors access to the application and collects data to build a mathematical model behind every parameter and HTTP method.
NEW QUESTION 28
......
NSE6_FWB-6.1 Real Valid Brain Dumps With 30 Questions: https://www.crampdf.com/NSE6_FWB-6.1-exam-prep-dumps.html