Free Fortinet NSE 6 – FortiWeb 6.4 Exam NSE6_FWB-6.4 Exam Practice Test

When viewing the attack logs on FortiWeb, which client IP address is shown when you are using XFF header rules?

• FortiGate public IP
• FortiWeb IP
• FortiGate local IP
• Client real IP

How does offloading compression to FortiWeb benefit your network?

• free up resources on the database server
• Free up resources on the web server
• reduces file size on the client's storage
• free up resources on the FortiGate

Which of the following FortiWeb features is part of the mitigation tools against OWASP A4 threats?

• Sensitive info masking
• Poison Cookie detection
• Session Management
• Brute Force blocking

When FortiWeb triggers a redirect action, which two HTTP codes does it send to the client to inform the browser of the new URL? (Choose two.)

• 403
• 302
• 301
• 404

In which scenario might you want to use the compression feature on FortiWeb?

• When you are serving many corporate road warriors using 4G tablets and phones
• When you are offering a music streaming service
• When you want to reduce buffering of video streams
• Never, since most traffic today is already highly compressed

Which algorithm is used to build mathematical models for bot detection?

• HCM
• SVN
• SVM
• HMM

Which three statements about HTTPS on FortiWeb are true? (Choose three.)

• For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.
• After enabling HSTS, redirects to HTTPS are no longer necessary.
• In true transparent mode, the TLS session terminator is a protected web server.
• Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.
• In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.

You are using HTTP content routing on FortiWeb. Requests for web app A should be forwarded to a cluster of web servers which all host the same web app. Requests for web app B should be forwarded to a different, single web server.Which is true about the solution?

• Static or policy-based routes are not required.
• To achieve HTTP content routing, you must chain policies: the first policy accepts all traffic, and forwards requests for web app A to the virtual server for policy A. It also forwards requests for web app B to the virtual server for policy B. Policy A and Policy B apply their app-specific protection profiles, and then distribute that app's traffic among all members of the server farm.
• You must put the single web server into a server pool in order to use it with HTTP content routing.
• The server policy applies the same protection profile to all its protected web apps.

Which implementation is best suited for a deployment that must meet compliance criteria?

• SSL Inspection with FortiWeb in Transparency mode
• SSL Offloading with FortiWeb in reverse proxy mode
• SSL Inspection with FrotiWeb in Reverse Proxy mode
• SSL Offloading with FortiWeb in Transparency Mode

The FortiWeb machine learning (ML) feature is a two-phase analysis mechanism.Which two functions does the first layer perform? (Choose two.)

• Determines whether an anomaly is a real attack or just a benign anomaly that should be ignored
• Builds a threat model behind every parameter and HTTP method
• Determines if a detected threat is a false-positive or not
• Determines whether traffic is an anomaly, based on observed application traffic over time