Download Fortinet.NSE6_FWB-5.6.0.Pass4Sure.2019-02-21.30q.vcex

Download Exam

File Info

Exam FortiWeb 5.6.0 Specialist
Number NSE6_FWB-5.6.0
File Name Fortinet.NSE6_FWB-5.6.0.Pass4Sure.2019-02-21.30q.vcex
Size 49 KB
Posted Feb 21, 2019
Download Fortinet.NSE6_FWB-5.6.0.Pass4Sure.2019-02-21.30q.vcex

How to open VCEX & EXAM Files?

Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.

Purchase

Coupon: MASTEREXAM
With discount: 20%






Demo Questions

Question 1

What can an administrator do if a client has been incorrectly Period Blocked?


  1. Disconnect the client from the network
  2. Manually release the IP from the temporary Blacklist
  3. Nothing, it is not possible to override a Period Block
  4. Force a new IP address to the client.
Correct answer: B
Explanation:
Reference: http://help.fortinet.com/fweb/581/Content/FortiWeb/fortiweb-admin/monitor_blocked_ips.htm
Reference: http://help.fortinet.com/fweb/581/Content/FortiWeb/fortiweb-admin/monitor_blocked_ips.htm



Question 2

When generating a protection configuration from an auto learning report what critical step must you do before generating the final protection configuration?


  1. Restart the FortiWeb to clear the caches
  2. Drill down in the report to correct any false positives.
  3. Activate the report to create t profile
  4. Take the FortiWeb offline to apply the profile
Correct answer: B



Question 3

How does an ADOM differ from a VDOM?


  1. ADOMs do not have virtual networking
  2. ADOMs improve performance by offloading some functions.
  3. ADOMs only affect specific functions, and do not provide full separation like VDOMs do.
  4. Allows you to have 1 administrator for multiple tenants
Correct answer: D



Question 4

You are configuring FortiAnalyzer to store logs from FortiWeb. 
Which is true?


  1. FortiAnalyzer will store antivirus and DLP archives from FortiWeb.
  2. You must enable ADOMs on FortiAnalyzer.
  3. To store logs from FortiWeb 5.6.0, on FortiAnalyzer, you must select “FoкtiWeb 5.4”.
  4. FortiWeb will query FortiAnalyzer for reports, instead of generating them locally.
Correct answer: B
Explanation:
Reference: https://docs.fortinet.com/uploaded/files/3143/FortiAnalyzer-5.4.1-Administration-Guide.pdf page 19
Reference: https://docs.fortinet.com/uploaded/files/3143/FortiAnalyzer-5.4.1-Administration-Guide.pdf page 19



Question 5

Which of the following would be a reason for implementing rewrites?


  1. Page has been moved to a new URL
  2. Page has been moved to a new IP address
  3. Replace vulnerable functions.
  4. Send connection to secure channel
Correct answer: A



Question 6

A client is trying to start a session from a page that should normally be accessible only after they have logged in. 
When a start page rule detects the invalid session access, what can FortiWeb do? (Choose three.)


  1. Reply with a “403 Forbidden” HTTP error
  2. Allow the page access, but log the violation
  3. Automatically redirect the client to the login page
  4. Display an access policy message, then allow the client to continue, redirecting them to their requested page
  5. Prompt the client to authenticate
Correct answer: ABC



Question 7

Which is true about HTTPS on FortiWeb? (Choose three.)


  1. For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.
  2. After enabling HSTS, redirects to HTTPS are no longer necessary.
  3. In true transparent mode, the TLS session terminator is a protected web server.
  4. Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.
  5. In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.
Correct answer: ACE



Question 8

When viewing the attack logs on your FortiWeb, which IP Address is shown for the client when using XFF Header rules?


  1. FortiGate’s public IP
  2. FortiGate’s local IP
  3. FortiWeb’s IP
  4. Client’s real IP
Correct answer: D



Question 9

Which of the following is true about Local User Accounts?


  1. Must be assigned regardless of any other authentication
  2. Can be used for Single Sign On
  3. Can be used for site publishing
  4. Best suited for large environments with many users
Correct answer: A



Question 10

In which operation mode(s) can FortiWeb modify HTTP packets? (Choose two.)


  1. Transparent Inspection
  2. Offline protection
  3. True transparent proxy
  4. Reverse proxy
Correct answer: D
Explanation:
Reference: http://help.fortinet.com/fweb/541/Content/FortiWeb/fortiweb-admin/planning_topology.htm
Reference: http://help.fortinet.com/fweb/541/Content/FortiWeb/fortiweb-admin/planning_topology.htm









CONNECT US

Facebook

Twitter

PROFEXAM WITH A 20% DISCOUNT

You can buy ProfExam with a 20% discount!



HOW TO OPEN VCEX FILES

Use ProfExam Simulator to open VCEX files