Free Fortinet NSE 6 – FortiWeb 6.4 Exam NSE6_FWB-6.4 Exam Practice Test

What role does FortiWeb play in ensuring PCI DSS compliance?

• It provides the ability to securely process cash transactions.
• It provides the required SQL server protection.
• It provides the WAF required by PCI.
• It provides credit card processing capabilities.

What key factor must be considered when setting brute force rate limiting and blocking?

• A single client contacting multiple resources
• Multiple clients sharing a single Internet connection
• Multiple clients from geographically diverse locations
• Multiple clients connecting to multiple resources

Under what circumstances would you want to use the temporary uncompress feature of FortiWeb?

• In the case of compression being done on the FortiWeb, to inspect the content of the compressed file
• In the case of the file being a .MP3 music file
• In the case of compression being done on the web server, to inspect the content of the compressed file.
• In the case of the file being an .MP4 video

What can an administrator do if a client has been incorrectly period blocked?

• Nothing, it is not possible to override a period block.
• Manually release the ID address from the temporary blacklist.
• Force a new IP address to the client.
• Disconnect the client from the network.

Which regex expression is the correct format for redirecting the URL http://www.example.com?

• www\.example\.com
• www.example.com
• www\example\com
• www/.example/.com

In Reverse proxy mode, how does FortiWeb handle traffic that does not match any defined policies?

• Non-matching traffic is allowed
• non-Matching traffic is held in buffer
• Non-matching traffic is Denied
• Non-matching traffic is rerouted to FortiGate

Which operation mode does not require additional configuration in order to allow FTP traffic to your web server?

• Offline Protection
• Transparent Inspection
• True Transparent Proxy
• Reverse-Proxy

You are configuring FortiAnalyzer to store logs from FortiWeb.Which is true?

• FortiAnalyzer will store antivirus and DLP archives from FortiWeb.
• You must enable ADOMs on FortiAnalyzer.
• To store logs from FortiWeb 6.4, on FortiAnalyzer, you must select ''FrotiWeb 6.1''.
• FortiWeb will query FortiAnalyzer for reports, instead of generating them locally.

Which implementation is best suited for a deployment that must meet compliance criteria?

• SSL Inspection with FortiWeb in Transparency mode
• SSL Offloading with FortiWeb in reverse proxy mode
• SSL Inspection with FrotiWeb in Reverse Proxy mode
• SSL Offloading with FortiWeb in Transparency Mode

What role does FortiWeb play in ensuring PCI DSS compliance?

• PCI specifically requires a WAF
• Provides credit card processing capabilities
• Provide ability to securely process cash transactions
• Provides load balancing between multiple web servers