NSE 6 Network Security Specialist NSE6_FWB-6.4 Dumps Updated Nov 08, 2023 – PassLeaderVCE [Q15-Q37]

5/5 - (1 vote)

NSE 6 Network Security Specialist NSE6_FWB-6.4 Dumps | Updated Nov 08, 2023 – PassLeaderVCE

Master 2023 Latest The Questions NSE 6 Network Security Specialist and Pass NSE6_FWB-6.4 Real Exam!

Fortinet NSE6_FWB-6.4 certification exam is a valuable credential for security professionals who want to enhance their knowledge and skills in web application security. Fortinet NSE 6 – FortiWeb 6.4 certification validates the candidate’s ability to use FortiWeb to protect web applications from various types of attacks, including SQL injection, cross-site scripting, and buffer overflows. Fortinet NSE 6 – FortiWeb 6.4 certification also demonstrates the candidate’s ability to configure SSL inspection, create and manage web application firewall policies, and perform web application scans.

Q15. Which three statements about HTTPS on FortiWeb are true? (Choose three.)

For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.

After enabling HSTS, redirects to HTTPS are no longer necessary.

In true transparent mode, the TLS session terminator is a protected web server.

Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.

In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.

Q16. What is one of the key benefits of the FortiGuard IP reputation feature?

It maintains a list of private IP addresses.

It provides a document of IP addresses that are suspect, so that administrators can manually update their blacklists.

It is updated once per year.

It maintains a list of public IPs with a bad reputation for participating in attacks.

Explanation
FortiGuard IP Reputation service assigns a poor reputation, including virus-infected clients and malicious spiders/crawlers.

Q17. How does FortiWeb protect against defacement attacks?

It keeps a complete backup of all files and the database.

It keeps hashes of files and periodically compares them to the server.

It keeps full copies of all files and directories.

It keeps a live duplicate of the database.

Explanation
The anti-defacement feature examines a web site’s files for changes at specified time intervals. If it detects a change that could indicate a defacement attack, the FortiWeb appliance can notify you and quickly react by automatically restoring the web site contents to the previous backup.

Q18. Which statement about local user accounts is true?

They are best suited for large environments with many users.

They cannot be used for site publishing.

They must be assigned, regardless of any other authentication.

They can be used for SSO.

Q19. What benefit does Auto Learning provide?

Automatically identifies and blocks suspicious IPs

FortiWeb scans all traffic without taking action and makes recommendations on rules

Automatically builds rules sets

Automatically blocks all detected threats

Q20. In Reverse proxy mode, how does FortiWeb handle traffic that does not match any defined policies?

Non-matching traffic is allowed

non-Matching traffic is held in buffer

Non-matching traffic is Denied

Non-matching traffic is rerouted to FortiGate

Q21. Refer to the exhibit.

FortiWeb is configured to block traffic from Japan to your web application server. However, in the logs, the administrator is seeing traffic allowed from one particular IP address which is geo-located in Japan.
What can the administrator do to solve this problem? (Choose two.)

Manually update the geo-location IP addresses for Japan.

If the IP address is configured as a geo reputation exception, remove it.

Configure the IP address as a blacklisted IP address.

If the IP address is configured as an IP reputation exception, remove it.

Q22. Refer to the exhibits.

FortiWeb is configured in reverse proxy mode and it is deployed downstream to FortiGate. Based on the configuration shown in the exhibits, which of the following statements is true?

FortiGate should forward web traffic to the server pool IP addresses.

The configuration is incorrect. FortiWeb should always be located upstream to FortiGate.

You must disable the Preserve Client IP setting on FotriGate for this configuration to work.

FortiGate should forward web traffic to virtual server IP address.

Q23. Which two statements about running a vulnerability scan are true? (Choose two.)

You should run the vulnerability scan during a maintenance window.

You should run the vulnerability scan in a test environment.

Vulnerability scanning increases the load on FortiWeb, so it should be avoided.

You should run the vulnerability scan on a live website to get accurate results.

Explanation
Should the Vulnerability Scanner allow it, SVMS will set the scan schedule (or schedules) to run in a maintenance window. SVMS will advise Client of the scanner’s ability to complete the scan(s) within the maintenance window.
Vulnerabilities on live web sites. Instead, duplicate the web site and its database in a test environment.

Q24. When is it possible to use a self-signed certificate, rather than one purchased from a commercial certificate authority?

If you are a small business or home office

If you are an enterprise whose employees use only mobile devices

If you are an enterprise whose resources do not need security

If you are an enterprise whose computers all trust your active directory or other CA server

Q25. Which two statements about the anti-defacement feature on FortiWeb are true? (Choose two.)

Anti-defacement can redirect users to a backup web server, if it detects a change.

Anti-defacement downloads a copy of your website to RAM, in order to restore a clean image, if it detects defacement.

FortiWeb will only check to see if there are changes on the web server; it will not download the whole file each time.

Anti-defacement does not make a backup copy of your databases.

Explanation
Anti-defacement backs up web pages only, not databases.
If it detects any file changes, the FortiWeb appliance will download a new backup revision.

Q26. What must you do with your FortiWeb logs to ensure PCI DSS compliance?

Store in an off-site location

Erase them every two weeks

Enable masking of sensitive data

Compress them into a .zip file format

Q27. Refer to the exhibit.

FortiADC is applying SNAT to all inbound traffic going to the servers. When an attack occurs, FortiWeb blocks traffic based on the 192.0.2.1 source IP address, which belongs to FortiADC. The setup is breaking all connectivity and genuine clients are not able to access the servers.
What must the administrator do to avoid this problem? (Choose two.)

Enable the Use X-Forwarded-For setting on FortiWeb.

No Special configuration is required; connectivity will be re-established after the set timeout.

Place FortiWeb in front of FortiADC.

Enable the Add X-Forwarded-For setting on FortiWeb.

Explanation
Configure your load balancer to insert or append to an X-Forwarded-For:, X-Real-IP:, or other HTTP X-header. Also configure FortiWeb to find the original attacker’s or client’s IP address in that HTTP header

Q28. What role does FortiWeb play in ensuring PCI DSS compliance?

PCI specifically requires a WAF

Provides credit card processing capabilities

Provide ability to securely process cash transactions

Provides load balancing between multiple web servers

Explanation
FortiWeb helps you meet all PCI requirements, but PCI now specifically recommends using a WAF, and developing remediations against the top 10 vulnerabilities, according to OWASP.

Q29. Which of the following is true about Local User Accounts?

Must be assigned regardless of any other authentication

Can be used for Single Sign On

Can be used for site publishing

Best suited for large environments with many users

Q30. An e-commerce web app is used by small businesses. Clients often access it from offices behind a router, where clients are on an IPv4 private network LAN. You need to protect the web application from denial of service attacks that use request floods.
What FortiWeb feature should you configure?

Enable “Shared IP” and configure the separate rate limits for requests from NATted source IPs.

Configure FortiWeb to use “X-Forwarded-For:” headers to find each client’s private network IP, and to block attacks using that.

Enable SYN cookies.

Configure a server policy that matches requests from shared Internet connections.

Q31. What capability can FortiWeb add to your Web App that your Web App may or may not already have?

Automatic backup and recovery

High Availability

HTTP/HTML Form Authentication

SSL Inspection

Q32. Under which circumstances does FortiWeb use its own certificates? (Choose Two)

Secondary HTTPS connection to server where FortiWeb acts as a client

HTTPS to clients

HTTPS access to GUI

HTTPS to FortiGate

Q33. Which implementation is best suited for a deployment that must meet compliance criteria?

SSL Inspection with FortiWeb in Transparency mode

SSL Offloading with FortiWeb in reverse proxy mode

SSL Inspection with FrotiWeb in Reverse Proxy mode

SSL Offloading with FortiWeb in Transparency Mode

Q34. What other consideration must you take into account when configuring Defacement protection

Use FortiWeb to block SQL Injections and keep regular backups of the Database

Also incorporate a FortiADC into your network

None. FortiWeb completely secures the site against defacement attacks

Configure the FortiGate to perform Anti-Defacement as well

Q35. Which is true about HTTPS on FortiWeb? (Choose three.)

For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.

After enabling HSTS, redirects to HTTPS are no longer necessary.

In true transparent mode, the TLS session terminator is a protected web server.

Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.

In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.

Q36. The FortiWeb machine learning (ML) feature is a two-phase analysis mechanism.
Which two functions does the first layer perform? (Choose two.)

Determines whether an anomaly is a real attack or just a benign anomaly that should be ignored

Builds a threat model behind every parameter and HTTP method

Determines if a detected threat is a false-positive or not

Determines whether traffic is an anomaly, based on observed application traffic over time

Explanation
The first layer uses the Hidden Markov Model (HMM) and monitors access to the application and collects data to build a mathematical model behind every parameter and HTTP method.

Loading …

Fortinet NSE6_FWB-6.4 is a certification exam that is designed for professionals who want to validate their knowledge and skills in deploying, configuring, and managing Fortinet’s FortiWeb product. FortiWeb is a web application firewall that provides advanced security features to protect web applications from various cyber threats. The NSE6_FWB-6.4 certification exam is a part of the Fortinet Network Security Expert (NSE) program, which is a comprehensive training and certification program that covers all aspects of network security.

A fully updated 2023 NSE6_FWB-6.4 Exam Dumps exam guide from training expert PassLeaderVCE: https://www.passleadervce.com/NSE-6-Network-Security-Specialist/reliable-NSE6_FWB-6.4-exam-learning-guide.html