The latest update of Leap4Pass Fortinet NSE6_FWB-6.0 test dumps contains PDF and VCE, all test questions are from the test room and real test cracking. All Fortinet NSE6_FWB-6.0 test questions are provided by Lead4Pass test experts.
You can get the latest exam questions and answers here. Get the complete dumps of NSE6_FWB-6.0: https://www.lead4pass.com/nse6_fwb-6-0.html (Q&A: 30).
All Fortinet NSE6_FWB-6.0 test questions have been updated and the answers have been corrected! Make sure your exam questions are true and valid to help you pass the first exam!
[2021.8] Fortinet NSE6_FWB-6.0 exam PDF uploaded from google drive, online download provided by the latest update of Lead4pass:
https://drive.google.com/file/d/1IML1A_cijQBia50Kw_lfoHdq3TerY8gp/
Free sharing of Fortinet NSE6_FWB-6.0 exam questions and answers online practice test
QUESTION 1
Under what circumstances would you want to use the temporary uncompress feature of FortiWeb?
A. In the case of compression being done on the FortiWeb, to inspect the content of the compressed file
B. In the case of the file being a .MP3 music file
C. In the case of compression being done on the web server, to inspect the content of the compressed file.
D. In the case of the file being an .MP4 video
Correct Answer: C
QUESTION 2
Under which circumstances does FortiWeb use its own certificates? (Choose Two)
A. Secondary HTTPS connection to server where FortiWeb acts as a client
B. HTTPS to clients
C. HTTPS access to GUI
D. HTTPS to FortiGate
Correct Answer: AC
QUESTION 3
Which of the following is true about Local User Accounts?
A. Must be assigned regardless of any other authentication
B. Can be used for Single Sign On
C. Can be used for site publishing
D. Best suited for large environments with many users
Correct Answer: A
QUESTION 4
When integrating FortiWeb and FortiAnalyzer, why is the selection for FortiWeb Version critical? (Choose two)
A. Defines Log file format
B. Defines communication protocol
C. Defines Database Schema
D. Defines Log storage location
Correct Answer: AD
QUESTION 5
In Reverse proxy mode, how does FortiWeb handle traffic that does not match any defined policies?
A. Non-matching traffic is allowed
B. non-Matching traffic is held in buffer
C. Non-matching traffic is Denied
D. Non-matching traffic is rerouted to FortiGate
Correct Answer: C
QUESTION 6
A client is trying to start a session from a page that should normally be accessible only after they have
logged in.
When a start page rule detects the invalid session access, what can FortiWeb do? (Choose three.)
A. Reply with a “403 Forbidden” HTTP error
B. Allow the page access, but log the violation
C. Automatically redirect the client to the login page
D. Display an access policy message, then allow the client to continue, redirecting them to their requested page
E. Prompt the client to authenticate
Correct Answer: ABC
QUESTION 7
You are deploying FortiWeb 6.0 in an Amazon Web Services cloud. Which 2 lines of this initial setup via CLI are
incorrect? (Choose two.)
A. 6
B. 9
C. 3
D. 2
Correct Answer: AC
QUESTION 8
You are configuring FortiAnalyzer to store logs from FortiWeb. Which is true?
A. FortiAnalyzer will store antivirus and DLP archives from FortiWeb.
B. You must enable ADOMs on FortiAnalyzer.
C. To store logs from FortiWeb 6.0, on FortiAnalyzer, you must select “FrotiWeb 5.4”.
D. FortiWeb will query FortiAnalyzer for reports, instead of generating them locally.
Correct Answer: B
QUESTION 9
How does your FortiWeb configuration differ if the FortiWeb is upstream of the SNAT device instead of downstream of
the SNAT device?
A. You must enable the “Use” X-Forwarded-For: option.
B. FortiWeb must be set for Transparent Mode
C. No special configuration required
D. You must enable “Add” X-Forwarded-For: instead of the “Use” X-Forwarded-For: option.
Correct Answer: A
QUESTION 10
When viewing the attack logs on your FortiWeb, which IP Address is shown for the client when using XFF Header
rules?
A. FortiGate\\’s public IP
B. FortiGate\\’s local IP
C. FortiWeb\\’s IP
D. Client\\’s real IP
Correct Answer: D
QUESTION 11
What other consideration must you take into account when configuring Defacement protection A. Use FortiWeb to block
SQL Injections and keep regular backups of the Database
B. Also incorporate a FortiADC into your network
C. None. FortiWeb completely secures the site against defacement attacks
D. Configure the FortiGate to perform Anti-Defacement as well
Correct Answer: D
QUESTION 12
You\\’ve configured an authentication rule with delegation enabled on FortiWeb. What happens when a user tries to
access the web application?
A. FrotiWeb redirects users to a FortiAuthenticator page, then if the user authenticates successfully, FortiGate signals to
FortiWeb to allow access to the web app
B. ForitWeb redirects the user to the web app\\’s authentication page
C. FortiWeb forwards the HTTP challenge from the server to the client, then monitors the reply, allowing access if the
user authenticates successfully
D. FortiWeb replies with a HTTP challenge of behalf of the server, the if the user authenticates successfully, FortiWeb
allows the request and also includes credentials in the request that it forwards to the web app
Correct Answer: A
QUESTION 13
When generating a protection configuration from an auto learning report what critical step must you do before
generating the final protection configuration?
A. Restart the FortiWeb to clear the caches
B. Drill down in the report to correct any false positives.
C. Activate the report to create t profile
D. Take the FortiWeb offline to apply the profile
Correct Answer: B
Share in August! Fortinet NSE6_FWB-6.0 exam pdf, NSE6_FWB-6.0 exam questions and answers,
And get the complete NSE6_FWB-6.0 exam dumps. The latest updated effective NSE6_FWB-6.0 brain dumps come from Lead4pass’s NSE6_FWB-6.0 Dumps (including PDF and VCE): https://www.lead4pass.com/nse6_fwb-6-0.html (30 Q&A)
ps. [Part] Get free Fortinet NSE6_FWB-6.0 dumps PDF online: https://drive.google.com/file/d/1IML1A_cijQBia50Kw_lfoHdq3TerY8gp/