Free Fortinet NSE 6 – FortiWeb 6.1 Exam NSE6_FWB-6.1 Exam Practice Test

FortiWeb offers the same load balancing algorithms as FortiGate.Which two Layer 7 switch methods does FortiWeb also offer? (Choose two.)

• Round robin
  
• HTTP session-based round robin
  
• HTTP user-based round robin
  
• HTTP content routes
  

You are using HTTP content routing on FortiWeb. You want requests for web application A to be forwarded to a cluster of web servers, which all host the same web application. You want requests for web application B to be forwarded to a different, single web server.Which statement about this solution is true?

• The server policy applies the same protection profile to all of its protected web applications.
  
• You must put the single web server in to a server pool, in order to use it with HTTP content routing.
  
• You must chain policies so that requests for web application A go to the virtual server for policy A, and requests for web application B go to the virtual server for policy B.
  
• Static or policy-based routes are not required.
  

How does FortiWeb protect against defacement attacks?

• It keeps a complete backup of all files and the database.
  
• It keeps hashes of files and periodically compares them to the server.
  
• It keeps full copies of all files and directories.
  
• It keeps a live duplicate of the database.
  

Which two statements about running a vulnerability scan are true? (Choose two.)

• You should run the vulnerability scan during a maintenance window.
  
• You should run the vulnerability scan in a test environment.
  
• Vulnerability scanning increases the load on FortiWeb, so it should be avoided.
  
• You should run the vulnerability scan on a live website to get accurate results.
  

A client is trying to start a session from a page that would normally be accessible only after the client has logged in.When a start page rule detects the invalid session access, what can FortiWeb do? (Choose three.)

• Display an access policy message, then allow the client to continue
  
• Redirect the client to the login page
  
• Allow the page access, but log the violation
  
• Prompt the client to authenticate
  
• Reply with a 403 Forbidden HTTP error
  

When FortiWeb triggers a redirect action, which two HTTP codes does it send to the client to inform the browser of the new URL? (Choose two.)

• 403
  
• 302
  
• 301
  
• 404
  

Which would be a reason to implement HTTP rewriting?

• The original page has moved to a new URL
  
• To replace a vulnerable function in the requested URL
  
• To send the request to secure channel
  
• The original page has moved to a new IP address
  

What must you do with your FortiWeb logs to ensure PCI DSS compliance?

• Store in an off-site location
  
• Erase them every two weeks
  
• Enable masking of sensitive data
  
• Compress them into a .zip file format
  

In which two operating modes can FortiWeb modify HTTP packets? (Choose two.)

• Offline protection
  
• Transparent inspection
  
• True transparent proxy
  
• Reverse proxy
  

What role does FortiWeb play in ensuring PCI DSS compliance?

• It provides the ability to securely process cash transactions.
  
• It provides the required SQL server protection.
  
• It provides the WAF required by PCI.
  
• It provides credit card processing capabilities.